PT-2023-10238 · Unknown · S134328 Webapplication-Veganguide
CVE-2015-10059
·
Publicado
2023-01-17
·
Atualizado
2024-05-17
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
s134328 Webapplication-Veganguide (affected versions not specified)
Description
A vulnerability has been found in the s134328 Webapplication-Veganguide, classified as problematic. It affects unknown code of the file p05-integration/app/shared/api/apiService.js. The manipulation of the
country/city argument leads to cross-site scripting. The attack can be initiated remotely.Recommendations
Apply a patch to fix this issue, specifically the patch named 2aa760fa4e779e40a28206a32ac22ac10356f519. As a temporary workaround, consider restricting access to the
apiService.js file or disabling the manipulation of the country/city argument until the patch is applied.Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
S134328 Webapplication-Veganguide