GENI Portal error-text.php Kushe Cross Site Scripting

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a GENI Portal. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil portal/www/portal/error-text.php, a cikin sashi $software_component. Wuro manipulation of the argument Kushe ga Cross Site Scripting. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-79. Lalle, rauni an sanar da shi 01/17/2023 da 1822. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2020-36653. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ga. Babu wani exploit da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. Patch ɗin an san shi da c2356cc41260551073bfaa3a94d1ab074f554938. Za a iya sauke maganin matsalar daga github.com. Ya kamata a yi amfani da patch don magance wannan matsala. If you want to get best quality of vulnerability data, you may have to visit VulDB.

3 Goyarwa · 72 Datenpunkte

FurɗeSúgá
01/17/2023 08:44		Gargadi 1/2
02/09/2023 10:38		Gargadi 2/2
02/09/2023 10:44
software_vendorGENIGENIGENI
software_namePortalPortalPortal
software_fileportal/www/portal/error-text.phpportal/www/portal/error-text.phpportal/www/portal/error-text.php
software_argumenterrorerrorerror
vulnerability_cweCWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)
vulnerability_risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
cvss3_vuldb_rlOOO
cvss3_vuldb_rcCCC
advisory_identifier182218221822
advisory_urlhttps://github.com/GENI-NSF/geni-portal/pull/1822https://github.com/GENI-NSF/geni-portal/pull/1822https://github.com/GENI-NSF/geni-portal/pull/1822
countermeasure_nameKariKariKari
patch_namec2356cc41260551073bfaa3a94d1ab074f554938c2356cc41260551073bfaa3a94d1ab074f554938c2356cc41260551073bfaa3a94d1ab074f554938
countermeasure_patch_urlhttps://github.com/GENI-NSF/geni-portal/commit/c2356cc41260551073bfaa3a94d1ab074f554938https://github.com/GENI-NSF/geni-portal/commit/c2356cc41260551073bfaa3a94d1ab074f554938https://github.com/GENI-NSF/geni-portal/commit/c2356cc41260551073bfaa3a94d1ab074f554938
countermeasure_advisoryquoteUpdate error-text.phpUpdate error-text.phpUpdate error-text.php
source_cveCVE-2020-36653CVE-2020-36653CVE-2020-36653
cna_responsibleVulDBVulDBVulDB
advisory_date1673910000 (01/17/2023)1673910000 (01/17/2023)1673910000 (01/17/2023)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_ciNNN
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss2_vuldb_rcCCC
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_auSSS
cvss2_vuldb_eNDNDND
cvss3_vuldb_prLLL
cvss3_vuldb_eXXX
cvss2_vuldb_basescore4.04.04.0
cvss2_vuldb_tempscore3.53.53.5
cvss3_vuldb_basescore3.53.53.5
cvss3_vuldb_tempscore3.43.43.4
cvss3_meta_basescore3.53.54.4
cvss3_meta_tempscore3.43.44.3
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1673910000 (01/17/2023)1673910000 (01/17/2023)
cve_nvd_summaryA vulnerability was found in GENI Portal. It has been rated as problematic. Affected by this issue is some unknown functionality of the file portal/www/portal/error-text.php. The manipulation of the argument error leads to cross site scripting. The attack may be launched remotely. The name of the patch is c2356cc41260551073bfaa3a94d1ab074f554938. It is recommended to apply a patch to fix this issue. VDB-218474 is the identifier assigned to this vulnerability.A vulnerability was found in GENI Portal. It has been rated as problematic. Affected by this issue is some unknown functionality of the file portal/www/portal/error-text.php. The manipulation of the argument error leads to cross site scripting. The attack may be launched remotely. The name of the patch is c2356cc41260551073bfaa3a94d1ab074f554938. It is recommended to apply a patch to fix this issue. VDB-218474 is the identifier assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiR
cvss3_nvd_sC
cvss3_nvd_cL
cvss3_nvd_iL
cvss3_nvd_aN
cvss2_nvd_avN
cvss2_nvd_acL
cvss2_nvd_auS
cvss2_nvd_ciN
cvss2_nvd_iiP
cvss2_nvd_aiN
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prL
cvss3_cna_uiR
cvss3_cna_sU
cvss3_cna_cN
cvss3_cna_iL
cvss3_cna_aN
cve_cnaVulDB
cvss2_nvd_basescore4.0
cvss3_nvd_basescore6.1
cvss3_cna_basescore3.5

◂ GurɗoGumtiGada ▸

Do you know our Splunk app?

Download it now for free!