Cure53 Dompurify Sårbarheter

Tidslinje

Version

1.0.01
1.0.11
1.0.21
1.0.31
1.0.41

Åtgärd

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Utnyttjbarhet

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined2

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent2
Network0

Autentisering

Not Defined0
High0
Low2
None0

Användarinteraktion

Not Defined0
Required1
None1

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤31
≤40
≤50
≤61
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k1
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k2
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Versions (26): 1, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 2, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
31/10/20235.85.7Cure53 DOMPurify hooks-target-blank-demo.html Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-25155
08/10/20204.54.3Cure53 DOMPurify cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-26870

fler inlägg av Cure53

◂ TidigareÖversiktNästa ▸

Might our Artificial Intelligence support you?

Check our Alexa App!