PT-2020-20429
CVE-2020-9013
·
تاريخ النشر
2020-02-16
·
تاريخ التحديث
2022-01-01
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Arvato Skillpipe version 3.0
Description
The issue allows attackers to bypass intended print restrictions. This is achieved by modifying the HTML source code, specifically by deleting the
element.
Recommendations
For Arvato Skillpipe version 3.0, consider implementing proper input validation and sanitization to prevent modification of the HTML source code, specifically protecting the
watermark div element from deletion. As a temporary workaround, restrict access to the HTML source code editing functionality to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾