| |
Podatność CVE-2023-6146
Publikacja: 2023-12-08 Modyfikacja: 2023-12-14
| Opis: |
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details.
|
Typ:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Referencje: |
https://www.qualys.com/security-advisories/
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
Polish
English