Threats tagged 'ghsa-7wgv-gp5p-x4jc'

1 threat

Threats tagged 'ghsa-7wgv-gp5p-x4jc'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.4%	CVE-2026-15371Velociraptor · Improper handling of URL encoding (hex encoding) High8.1EPSS 0.4%2026-08-18CVE Database V5CVE-2026-15371 CVE-2026-15371 is a high-severity vulnerability in Rapid7 Velociraptor versions from 0 up to but not including 0.77.2. The web GUI allows users to specify a custom column type as a URL, but it does not restrict URL schemes. This flaw permits an attacker to use a JavaScript scheme, leading to a cross-site scripting (XSS) risk when users click the crafted URL in the GUI. EPSS 0.4%Vulnerability Rapid7 #cwe-177 #ghsa-7wgv-gp5p-x4jc	CVE Database V5	2026-08-18

Showing 1–1 of 1 result