PT-2018-2757 · Этлас · Этлас

Published

2018-12-20

·

Updated

2018-12-20

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Этлас (affected versions not specified)
Description The issue exists due to inadequate protection of the web page structure in the Этлас electronic document management system. Exploitation of this issue may allow a remote attacker to execute arbitrary code in the user's browser by placing it in the Описание field when creating a new process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2019-01733

Affected Products

Этлас