PT-2020-14121
CVE-2020-15016
·
تاريخ النشر
2020-06-26
·
تاريخ التحديث
2020-07-01
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NeDi version 1.9C
Description
The issue concerns reflected cross-site scripting. The Other-Converter.php file does not properly validate user input, allowing an attacker to exploit this by crafting arbitrary JavaScript in the
txt GET parameter.Recommendations
For NeDi version 1.9C, consider restricting access to the Other-Converter.php file until a proper fix is available, and avoid using the
txt parameter in the affected endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾