PT-2014-3310
CVE-2013-7257
·
Publicado
2014-01-02
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Codiad version 2.0.7
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the
Project Name field. This enables attackers to execute malicious scripts on the client-side, potentially leading to unauthorized actions or data theft.Recommendations
For Codiad version 2.0.7, update the software to a version that fixes this issue, ensuring that user input in the
Project Name field is properly sanitized to prevent XSS attacks. As a temporary workaround, consider restricting user input in the Project Name field to minimize the risk of exploitation.Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾