PT-2021-9638
CVE-2020-13564
·
تاريخ النشر
2020-10-23
·
تاريخ التحديث
2022-07-29
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
phpGACL version 3.3.7
Description
A cross-site scripting issue exists in the template functionality. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this issue in the
acl id parameter.Recommendations
For phpGACL version 3.3.7, consider restricting access to the template functionality until a patch is available. As a temporary workaround, avoid using the
acl id parameter in the affected template endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾