PT-2018-17015
CVE-2018-5521
·
تاريخ النشر
2018-06-01
·
تاريخ التحديث
2018-08-01
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 11.2.1
F5 BIG-IP versions 11.5.1 through 11.5.5
F5 BIG-IP versions 11.6.1 through 11.6.3.1
F5 BIG-IP versions 12.1.0 through 12.1.3.1
Description
The issue allows carefully crafted URLs to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to cross-site scripting (XSS).
Recommendations
For F5 BIG-IP version 11.2.1, update to a version that is not affected by this issue.
For F5 BIG-IP versions 11.5.1 through 11.5.5, update to a version that is not affected by this issue.
For F5 BIG-IP versions 11.6.1 through 11.6.3.1, update to a version that is not affected by this issue.
For F5 BIG-IP versions 12.1.0 through 12.1.3.1, update to a version that is not affected by this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾