PT-2010-5441
CVE-2010-4364
·
تاريخ النشر
2010-12-01
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
DaDaBIK version 4.3 beta3
Description
The issue allows remote attackers to bypass the protection mechanism and conduct cross-site scripting (XSS) attacks via the
html content and rich editor fields, due to the absence of the htmLawed library in case-sensitive environments.Recommendations
For DaDaBIK version 4.3 beta3, consider including the htmLawed library to mitigate the risk of cross-site scripting (XSS) attacks. As a temporary workaround, restrict access to the
html content and rich editor fields until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾