BDU%3A2020-05182 — Vulnetix

BDU%3A2020-05182 PUBLISHED CVSS 10 CRITICAL

Уязвимость компонента Cascading Style Sheets (CSS) инструмента для создания интерактивной документации Swagger UI, позволяющая нарушителю осуществить межсайтовую сценарную атаку

Risk Scores

CVSS 2.0

Affected Products

Vendor	Product	Versions
Oracle Corp.	Primavera Gateway, Banking Platform

Timeline

Nov 17, 2020 CVE Published

References

https://www.oracle.com/security-alerts/cpuoct2020.html url
https://github.com/swagger-api/swagger-ui/releases/tag/v3.23.11 url
https://github.com/tarantula-team/CSS-injection-in-Swagger-UI url

Open in Interactive Console →