Lucene search

K
osvGoogleOSV:GHSA-H3W2-QG2R-C7MF
HistoryAug 25, 2022 - 12:00 a.m.

Kirby CMS 2.5.12 Cross-site Scripting

2022-08-2500:00:25
Google
osv.dev
15
kirby cms 2.5.12
cross-site scripting
malicious http requests
web pages

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.1%

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.1%

Related for OSV:GHSA-H3W2-QG2R-C7MF