Lucene search

@huntrdevCVE-2023-0410

HistoryJan 20, 2023 - 1:15 a.m.

CVE-2023-0410

2023-01-2001:15:10

CWE-79

@huntrdev

web.nvd.nist.gov

cve

2023

0410

cross-site scripting

xss

generic

github

repository

builderio/qwik

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

26.7%

JSON

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

Affected configurations

Nvd

Node

builderqwikRange<0.16.2

VendorProductVersionCPE
builderqwik*cpe:2.3:a:builder:qwik:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
builder	qwik	*	cpe:2.3:a:builder:qwik::::::::

CNA Affected

[
  {
    "vendor": "builderio",
    "product": "builderio/qwik",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.1.0-beta5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a

huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

26.7%

JSON

Related for CVE-2023-0410