Lucene search

[email protected]CVE-2023-37225

HistoryDec 25, 2023 - 6:15 a.m.

CVE-2023-37225

2023-12-2506:15:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-37225

pexip infinity

xss

webapp1

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.

CPENameOperatorVersion
pexip:pexip_infinitypexip pexip infinitylt32.0
pexip:pexip_infinitypexip pexip infinityeq19
pexip:pexip_infinitypexip pexip infinityeq17
pexip:pexip_infinitypexip pexip infinityeq23.1
pexip:pexip_infinitypexip pexip infinityeq26.2
pexip:pexip_infinitypexip pexip infinityeq11
pexip:pexip_infinitypexip pexip infinityeq23
pexip:pexip_infinitypexip pexip infinityeq15
pexip:pexip_infinitypexip pexip infinityeq27.1
pexip:pexip_infinitypexip pexip infinityeq25.3

CPE	Name	Operator	Version
pexip:pexip_infinity	pexip pexip infinity	lt	32.0
pexip:pexip_infinity	pexip pexip infinity	eq	19
pexip:pexip_infinity	pexip pexip infinity	eq	17
pexip:pexip_infinity	pexip pexip infinity	eq	23.1
pexip:pexip_infinity	pexip pexip infinity	eq	26.2
pexip:pexip_infinity	pexip pexip infinity	eq	11
pexip:pexip_infinity	pexip pexip infinity	eq	23
pexip:pexip_infinity	pexip pexip infinity	eq	15
pexip:pexip_infinity	pexip pexip infinity	eq	27.1
pexip:pexip_infinity	pexip pexip infinity	eq	25.3

Rows per page:

1-10 of 541

References

docs.pexip.com/admin/security_bulletins.htm

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-37225

prion1 cvelist1