Lucene search
HistoryJun 22, 2023 - 7:15 p.m.
CVE-2023-34796
cve-2023
34796
xss
security vulnerability
dmarcts-report-viewer
unauthenticated
code execution
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
56.4%
Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the org_name or domain values.
Affected configurations
Node
techsneezedmarc_reportMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| techsneeze:dmarc_report | techsneeze dmarc report | eq | 1.1 |
Related
nvd
nvd
CVE-2023-34796
2023-06-22 19:15:08
prion
prion
Cross site scripting
2023-06-22 19:15:00
osv
osv
CVE-2023-34796
2023-06-22 19:15:08
cvelist
cvelist
CVE-2023-34796
2023-06-22 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
56.4%
Related for CVE-2023-34796