PT-2020-19923
CVE-2020-8020
·
تاريخ النشر
2020-05-13
·
تاريخ التحديث
2021-03-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb
Description
A Improper Neutralization of Input During Web Page Generation issue allows remote attackers to store arbitrary JS code, causing XSS.
Recommendations
For versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb, update to a version that includes the fix for this issue to prevent remote attackers from storing arbitrary JS code and causing XSS.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾