CVE-2020-11499

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the…

Low · published April 2, 2020

CVSS v3.0
3.3
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.

The record
Technical detail
CVSS v3.0
3.3 · LOW
Vector
CVSS:3.0/AC:L/AV:L/A:N/C:N/I:L/PR:N/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.7th percentile
Published
2020-04-02T22:43Z
EPSS history
Timeline
  • 02 APR 22:43Z
    Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the…
    cvelistv5