CVE-2020-7809 in ALSong

Сводка

по MITRE

ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Ответственный: KrCERT/CC
• Резервировать: 22.01.2020
• Модерация: принято
• Вход: VDB-155338
• CPE: готов
• CWE: CWE-79 (Подтверждённый)
• CVSS: 4.4 (NVD)
• EPSS: 0.00631
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7809
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7809
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7809/