Lucene search

K
cveMitreCVE-2023-37062
HistoryJul 07, 2023 - 5:15 p.m.

CVE-2023-37062

2023-07-0717:15:09
CWE-79
mitre
web.nvd.nist.gov
108
chamilo
xss
security
cve-2023-37062
nvd

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

29.9%

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories’ definition.

Affected configurations

Nvd
Node
chamilochamiloRange1.11.01.11.20
VendorProductVersionCPE
chamilochamilo*cpe:2.3:a:chamilo:chamilo:*:*:*:*:*:*:*:*

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

29.9%

Related for CVE-2023-37062