En resumen
- CVE-2020-10544 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.primefaces:primefaces, primefaces (primetek), primefaces.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.83%, mayor que el 57.6% de las vulnerabilidades.
- Solución: actualizar a 8.0 o posterior.
Description
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.
NVD description
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.
Más vulnerabilidades de org.primefaces:primefaces
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free