Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Honnycyo

#49446de 56,338
5.4CVSS total
Vulnerabilidades · 1
PT-2018-13627
5.4
2018-09-05
Lavalite · Lavalite · CVE-2018-16551
**Name of the Vulnerable Software and Affected Versions** LavaLite version 5.5 **Description** The issue is related to a Cross-Site Scripting (XSS) problem. It can be triggered via the `/edit` URI, as demonstrated by the example `client/job/job/Zy8PWBekrJ/edit`. **Recommendations** For LavaLite version 5.5, consider restricting access to the `/edit` URI until a patch is available. As a temporary workaround, avoid using the `/edit` endpoint to minimize the risk of exploitation.