Lucene search

[email protected]CVE-2023-0320

HistoryMar 20, 2023 - 1:15 p.m.

CVE-2023-0320

2023-03-2013:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-0320

cross-site scripting

izmir katip celebi university ubys

stored xss

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Izmir Katip Celebi University UBYS allows Stored XSS.This issue affects UBYS: before 23.03.16.

Affected configurations

NVD

Node

university_information_management_system_projectuniversity_information_management_systemRange<23.03.16

CPENameOperatorVersion
university_information_management_system_project:university_information_management_systemuniversity information management system project university information management systemlt23.03.16

CPE	Name	Operator	Version
university_information_management_system_project:university_information_management_system	university information management system project university information management system	lt	23.03.16

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "UBYS",
    "vendor": "Izmir Katip Celebi University",
    "versions": [
      {
        "lessThan": "23.03.16",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0159