PT-2014-2510
CVE-2013-1871
·
تاريخ النشر
2014-02-14
·
تاريخ التحديث
2022-02-03
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat Network Satellite versions 5.6
Description
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the
type parameter in the "account/EditAddress.do" endpoint.Recommendations
For version 5.6, consider restricting access to the "account/EditAddress.do" endpoint until a fix is available, and avoid using the
type parameter in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾