PT-2021-24169
CVE-2021-44916
·
تاريخ النشر
2021-12-20
·
تاريخ التحديث
2022-02-28
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Opmantek Open-AudIT Community versions 4.2.0 through 4.2.0
Description:
The issue allows malicious JavaScript code to be executed in the victim's browser if a bad value is passed to the routine via a URL. This is a Cross Site Scripting (XSS) issue.
Recommendations:
For Opmantek Open-AudIT Community version 4.2.0, update to version 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to URLs that may pass bad values to the routine. Avoid using URLs that may execute malicious JavaScript code in the victim's browser until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾