MEDIUMCVSS v4 4.8Vulnerability
CVE-2026-71881
Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 4.8
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Score
- 4.8
- Cvss version
- 4.0
- Last source
- NVD
- Cve id
- CVE-2026-71881
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-07T02:36:22+00:00
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published at
- 2026-11-07T00:16:58.577
- Last modified
- 2026-11-07T00:16:58.577
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph