Vulnerability Details CVE-2018-13408
An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-13408
-
cpe:2.3:a:jirafeau:jirafeau:1.0
-
cpe:2.3:a:jirafeau:jirafeau:1.1
-
cpe:2.3:a:jirafeau:jirafeau:1.2.0
-
cpe:2.3:a:jirafeau:jirafeau:2.0.0
-
cpe:2.3:a:jirafeau:jirafeau:3.0.0
-
cpe:2.3:a:jirafeau:jirafeau:3.1.0
-
cpe:2.3:a:jirafeau:jirafeau:3.2.0
-
cpe:2.3:a:jirafeau:jirafeau:3.2.1
-
cpe:2.3:a:jirafeau:jirafeau:3.3.0
-
cpe:2.3:a:jirafeau:jirafeau:3.4.0