rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-36439 
An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:18:19.000Z
CVE-2020-36440 
An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:18:08.000Z
CVE-2020-36441 
An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:17:56.000Z
CVE-2020-36442 
An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:17:36.000Z
CVE-2020-36443 
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:17:25.000Z
CVE-2020-36444 
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:17:13.000Z
CVE-2020-36445 
An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:17:02.000Z
CVE-2020-36446 
An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:16:50.000Z
CVE-2020-36447 
An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync for SyncRef<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:16:37.000Z
CVE-2020-36448 
An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache<K>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:16:23.000Z
CVE-2020-36449 
An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H>, Send is implemented without requiring H: Send.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:15:47.000Z
CVE-2020-36450 
An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:15:34.000Z
CVE-2020-36451 
An issue was discovered in the rcu_cell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:15:22.000Z
CVE-2020-36452 
An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone() has a drop of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:15:12.000Z
CVE-2020-36453 
An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:15:02.000Z
CVE-2020-36454 
An issue was discovered in the parc crate through 2020-11-14 for Rust. LockWeak<T> has an unconditional implementation of Send without trait bounds on T.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:14:51.000Z
CVE-2020-36455 
An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock<T> unconditionally implements Send and Sync.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:14:41.000Z
CVE-2020-36456 
An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell<T>, the Send trait lacks bounds on the contained type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:14:31.000Z
CVE-2020-36457 
An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox<T> implements the Send and Sync traits for all types T.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:14:20.000Z
CVE-2020-36458 
An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:14:09.000Z
CVE-2020-36459 
An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:13:55.000Z
CVE-2020-36460 
An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:13:44.000Z
CVE-2020-36461 
An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:13:33.000Z
CVE-2020-36462 
An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:13:09.000Z
CVE-2020-36463 
An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:58.000Z
CVE-2020-36464 
An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:46.000Z
CVE-2020-36465 
An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:33.000Z
CVE-2020-36466 
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:22.000Z
CVE-2020-36467 
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:12.000Z
CVE-2020-36468 
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:12:00.000Z
CVE-2020-36469 
An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implemented unconditionally.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:11:49.000Z
CVE-2020-36470 
An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:11:38.000Z
CVE-2020-36471 
An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function (for yielding values) has Send bounds.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:11:22.000Z
CVE-2020-36472 
An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander<EI> types that they contain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:11:08.000Z
CVE-2020-36473 
UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-14T20:49:56.000Z
CVE-2020-36474 
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T14:14:29.000Z
CVE-2020-36475 
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-36476 
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-36477 
An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-36478 
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-36485 
Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:04.000Z
CVE-2020-36486 
Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:03.000Z
CVE-2020-36488 
An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via `/null//` path commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:02.000Z
CVE-2020-36489 
Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the devicename information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:02.000Z
CVE-2020-36490 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:01.000Z
CVE-2020-36491 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:01.000Z
CVE-2020-36492 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:00.000Z
CVE-2020-36493 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:59.000Z
CVE-2020-36494 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:59.000Z
CVE-2020-36495 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:58.000Z
CVE-2020-36496 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:57.000Z
CVE-2020-36497 
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:56.000Z
CVE-2020-36498 
Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:55.000Z
CVE-2020-36499 
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in the content parameter of the Rubric Block (Add) module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:55.000Z
CVE-2020-36501 
Multiple cross-site scripting (XSS) vulnerabilities in the Support module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary address state or alternate address state input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:54.000Z
CVE-2020-36502 
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:19:53.000Z
CVE-2020-36503 Connections Business Directory < 9.7 - Admin+ CSV Injection
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
Problem types: cwe_id: CWE-1236
description: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Affected products: vendor: Unknown
product: Connections Business Directory
Credits: lang: en
value: Rudra Sarkar
Published: 2021-11-01T08:45:53.000Z
CVE-2020-36504 WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Wp-Pro-Quiz
Credits: lang: en
value: HoanHP
Published: 2021-11-01T08:45:55.000Z
CVE-2020-36505 Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF
The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Delete All Comments Easily
Credits: lang: en
value: Hoan Hp
Published: 2021-11-01T08:45:57.000Z
CVE-2020-36510 15Zine < 3.3.0 - Reflected Cross-Site Scripting
The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: 15Zine
Credits: lang: en
value: Fariq Fadillah Gusti Insani
Published: 2022-02-28T09:06:00.000Z
CVE-2020-36511 
An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T21:54:11.000Z
CVE-2020-36512 
An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::read_exact may read from uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T21:53:57.000Z
CVE-2020-36513 
An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. read_up_to may read from uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T21:53:44.000Z
CVE-2020-36514 
An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. fill_buf may read from uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T21:53:29.000Z
CVE-2020-36516 
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-26T03:14:46.000Z
CVE-2020-36517 
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-07T21:08:01.000Z
CVE-2020-36518 
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T00:00:00.000Z
CVE-2020-36519 
Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T23:45:01.000Z
CVE-2020-36521 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
Problem types: description: Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents
Affected products: vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-09-23T18:58:31.000Z
CVE-2020-36523 PlantUML Database Information Macro cross site scripting
A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross Site Scripting
Affected products: vendor: unspecified
product: PlantUML
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Published: 2022-06-03T14:55:20.000Z
CVE-2020-36524 Refined Toolkit UI-Image/UI-Button cross site scripting
A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross Site Scripting
Affected products: vendor: unspecified
product: Refined Toolkit
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Published: 2022-06-03T14:55:22.000Z