CVE-2020-28365

Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during the login process

published December 30, 2020

CVSS
—
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during the login process. When an administrator looks at logs, the payload is executed. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00699 · 52.6th percentile
Published
2020-12-30T18:17Z
EPSS history
Timeline
  • 30 DEC 18:17Z
    Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during the login process
    cvelistv5