Orta CVSS 5.4
CVE-2026-72583: CVE-2026-72583: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check.
Özet bilgiler
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,26 (yüzdelik 17)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor