2 lines
2.0 KiB
JSON
2 lines
2.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"DivvyDrive","vendor":"DivvyDrive Information Technologies Inc.","versions":[{"lessThan":"v.4.8.3.1","status":"affected","version":"4.8.2.23","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS.\n\nThis issue affects DivvyDrive: from 4.8.2.23 before v.4.8.3.1."},{"lang":"es","value":"Vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web (’cross-site scripting’) en DivvyDrive Information Technologies Inc. DivvyDrive permite XSS Almacenado.\n\nEste problema afecta a DivvyDrive: desde 4.8.2.23 antes de la v.4.8.3.1."}],"id":"CVE-2026-5220","lastModified":"2026-10-25T17:10:00.197","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5220","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-01T14:55:00.239657Z","version":"2.0.3"}}]},"published":"2026-07-01T15:17:12.090","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0475"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}
|