PT-2023-32674 · Viliusle · Minipaint
CVE-2023-6461
·
Publicado
2023-12-01
·
Atualizado
2023-12-06
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
viliusle/minipaint versions prior to 4.14.0
Description
The issue is related to Cross-site Scripting (XSS) - Reflected. This means that an attacker can inject malicious scripts into a website, which are then executed by the user's browser. The estimated number of potentially affected devices worldwide is not available.
Recommendations
For versions prior to 4.14.0, update to version 4.14.0 or later to resolve the issue.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Minipaint