PT-2023-10156 · Unknown · Qt-Users-Jp Silk
CVE-2014-125088
·
Publicado
2023-02-20
·
Atualizado
2024-05-17
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
qt-users-jp silk version 0.0.1
Description
A problem was found in the file contents/root/examples/header.qml. The manipulation of the
model.key and model.value arguments leads to cross-site scripting. The attack can be initiated remotely.Recommendations
To fix this issue, apply the patch bbc5d6eeea800025ef29edda3fd3c57836239eae. As a temporary workaround, consider restricting the manipulation of the
model.key and model.value arguments in the affected file until the patch is applied.Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Qt-Users-Jp Silk