PT-2021-10828
CVE-2020-23052
·
تاريخ النشر
2021-10-22
·
تاريخ التحديث
2021-10-28
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Catalyst IT Ltd Mahara CMS version 19.10.2
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities found in the groupfiles.php component. These vulnerabilities can be exploited via the
Number (also referred to as Nombre) and Description (also referred to as Descripción) parameters.Recommendations
For Catalyst IT Ltd Mahara CMS version 19.10.2, consider disabling the groupfiles.php component or restricting access to it until a patch is available. Avoid using the
Number and Description parameters in the affected component to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾