Lucene search
MitreCVE-2023-33829HistoryMay 24, 2023 - 9:15 p.m.
CVE-2023-33829
2023-05-2421:15:11
CWE-79
mitre
web.nvd.nist.gov
39
cve-2023-33829
stored xss
cross-site scripting
cloudogu scm manager
security vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.002
Percentile
51.3%
A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.
Affected configurations
Node
cloudoguscm_managerRange1.2–1.60
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cloudogu | scm_manager | * | cpe:2.3:a:cloudogu:scm_manager:*:*:*:*:*:*:*:* |
Related
githubexploit
githubexploit
Exploit for Cross-site Scripting in Cloudogu Scm Manager
2023-05-19 13:11:50
Exploit for Cross-site Scripting in Cloudogu Scm Manager
2023-05-19 13:11:50
cvelist
cvelist
CVE-2023-33829
2023-05-24 00:00:00
prion
prion
Cross site scripting
2023-05-24 21:15:00
nvd
nvd
CVE-2023-33829
2023-05-24 21:15:11
zdt
zdt
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated) Exploit
2023-05-26 00:00:00
packetstorm
packetstorm
SCM Manager 1.60 Cross Site Scripting
2023-05-26 00:00:00
exploitdb
exploitdb
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
2023-05-25 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.002
Percentile
51.3%
Related for CVE-2023-33829