PT-2020-14135
CVE-2020-15034
·
تاريخ النشر
2020-07-07
·
تاريخ التحديث
2020-07-09
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NeDi version 1.9C
Description
The issue allows an attacker to execute arbitrary JavaScript code via the "Monitoring-Setup.php"
tet parameter, enabling a cross-site scripting (XSS) attack.Recommendations
For NeDi version 1.9C, as a temporary workaround, consider restricting access to the "Monitoring-Setup.php" endpoint until a patch is available. Avoid using the
tet parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾