CVE-2021-35488
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 2.6%
probabilidade de exploração
2.6%top 16% das CVEs
exploração observada
nãonenhuma fonte reporta
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.
Produtos afetados
n/a · n/a