| 제목 | factominer FactoInvestigate 1.9 and earlier XSS |
|---|
| 설명 | the package is vulnerable to XSS, if a user analyzes a malicious dataset containing an XSS payload, the javascript code will be executed when the HTML report is generated and opened. Attackers can use that to redirect users to malicious websites acting as analysis reports. |
|---|
| 원천 | ⚠️ https://drive.google.com/drive/folders/1ZFjWlD5axvhWp--I7tuiZ9uOpSBmU_f6?usp=drive_link |
|---|
| 사용자 | letmewin (UID 61323) |
|---|
| 제출 | 2024. 01. 11. PM 04:10 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 01. 19. AM 10:35 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 251544 [FactoMineR FactoInvestigate 까지 1.9 HTML Report Generator HTML injection] |
|---|
| 포인트들 | 17 |
|---|