medium6.1
CVE-2020-11499
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the…
Impact
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Firmware Analysis And Comparison Tool Project | Firmware Analysis And Comparison Tool | Version 3.0 |