CVE-2021-47841mediumCWE-79

SnipCommand 0.1.0 - Persistent Cross-Site Scripting

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.4%

probabilidade de exploração

0.4%top 63% das CVEs

exploração observada

nãonenhuma fonte reporta

SnipCommand 0.1.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into command snippets. Attackers can execute arbitrary code by embedding malicious JavaScript that triggers remote command execution through file or title inputs.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Produtos afetados

gurayyarar · SnipCommand

Referências

https://github.com/gurayyarar/SnipCommand https://imgur.com/a/I2reH1M https://www.exploit-db.com/exploits/49829 https://www.vulncheck.com/advisories/snipcommand-persistent-cross-site-scripting