PT-2020-14131
CVE-2020-15030
·
تاريخ النشر
2020-07-07
·
تاريخ التحديث
2020-07-09
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NeDi version 1.9C
Description
The issue allows an attacker to execute arbitrary JavaScript code via the "Topology-Routes.php"
rtr parameter, enabling a cross-site scripting (XSS) attack.Recommendations
For NeDi version 1.9C, consider disabling access to the "Topology-Routes.php" endpoint until a patch is available. As a temporary workaround, restrict the use of the
rtr parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾