PT-2023-10156 · Unknown · Qt-Users-Jp Silk

CVE-2014-125088

·

Publicado

2023-02-20

·

Atualizado

2024-05-17

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions qt-users-jp silk version 0.0.1
Description A problem was found in the file contents/root/examples/header.qml. The manipulation of the model.key and model.value arguments leads to cross-site scripting. The attack can be initiated remotely.
Recommendations To fix this issue, apply the patch bbc5d6eeea800025ef29edda3fd3c57836239eae. As a temporary workaround, consider restricting the manipulation of the model.key and model.value arguments in the affected file until the patch is applied.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2014-125088

Produtos afetados

Qt-Users-Jp Silk