Lucene search
MitreCVE-2023-30319HistoryJul 06, 2023 - 4:15 p.m.
CVE-2023-30319
2023-07-0616:15:09
CWE-79
mitre
web.nvd.nist.gov
15
cve-2023-30319
cross site scripting
xss
vulnerability
username field
chatengine
nvd
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.003
Percentile
68.3%
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
Affected configurations
Node
chatengine_projectchatengineMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chatengine_project | chatengine | 1.0 | cpe:2.3:a:chatengine_project:chatengine:1.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2023-30319
2023-07-06 16:15:09
cvelist
cvelist
CVE-2023-30319
2023-07-06 00:00:00
prion
prion
Cross site scripting
2023-07-06 16:15:00
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.003
Percentile
68.3%
Related for CVE-2023-30319