PT-2018-16931
CVE-2018-5375
·
تاريخ النشر
2018-01-12
·
تاريخ التحديث
2018-01-24
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
DiscuzX version X3.4
Description
The issue is related to a XSS problem. It occurs via the
appid parameter in a delete action in the includespacecpspacecp space.php file.Recommendations
For DiscuzX version X3.4, avoid using the
appid parameter in the delete action of the includespacecpspacecp space.php file until a fix is available. As a temporary workaround, consider restricting access to the delete action in the includespacecpspacecp space.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾