Description
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.
Low · 3.3
CVE-2020-11499
EUVD-2020-3852GHSA-7jw9-j5ww-92vf
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated b…
Published Apr 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre