Lucene search

[email protected]CVE-2023-26953

HistoryMar 07, 2023 - 3:15 p.m.

CVE-2023-26953

2023-03-0715:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-26953

onekeyadmin

v1.3.9

xss vulnerability

add administrator module

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.3%

JSON

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.

Affected configurations

NVD

Node

onekeyadminonekeyadminMatch1.3.9

VendorProductVersionCPE
onekeyadminonekeyadmin1.3.9cpe:/a:onekeyadmin:onekeyadmin:1.3.9:::

Vendor	Product	Version	CPE
onekeyadmin	onekeyadmin	1.3.9	cpe:/a:onekeyadmin:onekeyadmin:1.3.9:::

References

github.com/keheying/onekeyadmin/issues/8