PT-2018-11310
CVE-2018-12655
·
Publicado
2018-06-22
·
Atualizado
2018-08-07
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SLiMS versions 8.3.1
Description
A Reflected Cross-Site Scripting (XSS) issue exists in the Circulation module. The issue is related to a URI in the admin/modules/circulation/loan rules.php file, specifically with the
keywords parameter.Recommendations
For version 8.3.1, avoid using the
keywords parameter in the /admin/modules/circulation/loan rules.php endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the Circulation module to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾