PT-2020-14732
CVE-2020-15951
·
تاريخ النشر
2020-11-05
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Immuta version 2.8.2
Description
The issue allows attackers to inject arbitrary HTML content into the application by supplying malicious project names. This could be used to redirect users to a phishing website in an attempt to steal credentials.
Recommendations
For Immuta version 2.8.2, update to a version that properly sanitizes user-supplied input to prevent HTML injection attacks. As a temporary workaround, consider restricting user input for project names to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾