Lucene search
HistoryMar 23, 2023 - 7:15 a.m.
CVE-2023-1051
cve-2023-1051
cross-site scripting
xss
web report system
vulnerability
security
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
27.3%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10.
Affected configurations
Node
askocweb_report_systemRange<23.03.10
| CPE | Name | Operator | Version |
|---|---|---|---|
| askoc:web_report_system | askoc web report system | lt | 23.03.10 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Web Report System",
"vendor": "As Koc Energy",
"versions": [
{
"lessThan": "23.03.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Cross site scripting
2023-03-23 07:15:00
cvelist
cvelist
CVE-2023-1051 XSS in As Koc Web Report System
2023-03-23 06:12:01
nvd
nvd
CVE-2023-1051
2023-03-23 07:15:12
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
27.3%
Related for CVE-2023-1051