Unrated

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandli...

CVE-2020-11499 First seen on SecPulse Apr 3, 2020

Original description The description as published by the source.

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report github.com

Key facts

Severity: Unrated
Published: Apr 3, 2020
First seen on SecPulse: Apr 3, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51