CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.6. It affects Nginx.
CVE
CVE-2020-5901
Severity
CRITICAL
CVSS
9.6
EPSS
1.47%
Nginx
Original NVD Description
In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result in a complete compromise of the system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)