Non évaluée

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandli...

CVE-2020-11499 Première détection SecPulse Apr 3, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
report github.com

Faits clés

Gravité: Non évaluée
Publication: Apr 3, 2020
Première détection SecPulse: Apr 3, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51