Non évaluée

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exp...

CVE-2020-15716 Première détection SecPulse Jul 16, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory exchange.xforce.ibmcloud.com
advisory gitlab.com
advisory gitlab.com
patch gitlab.com
report gitlab.com
web github.com

Faits clés

Gravité: Non évaluée
Publication: Jul 16, 2020
Première détection SecPulse: Jul 16, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51