PT-2022-7816 · Eidogo · Eidogo

Yewang · Published 2022-07-06 · Updated 2022-07-14 · CVE-2015-3172

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EidoGo (affected versions not specified)

Description The issue concerns Cross-Site Scripting (XSS) attacks. These attacks occur when an application includes user input in its output without properly validating or encoding it, allowing an attacker to inject malicious scripts into the application. In this case, EidoGo is susceptible to XSS attacks via maliciously crafted SGF input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-3172

Affected Products

Eidogo

References · 5

• 🔥 https://github.com/jkk/eidogo/pull/26 · Exploit
• 🔥 https://github.com/jkk/eidogo/issues/27 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-3172 · Security Note
• https://t.me/cibsecurity/45712 · Telegram Post
• https://t.me/cvenotify/32709 · Telegram Post