Lucene search

K
cveMitreCVE-2023-37685
HistoryAug 08, 2023 - 12:15 p.m.

CVE-2023-37685

2023-08-0812:15:11
CWE-79
mitre
web.nvd.nist.gov
19
cve-2023-37685
online nurse hiring system v1.0
cross-site scripting
xss
admin portal
search report page
nvd

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

43.8%

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal.

Affected configurations

Nvd
Node
phpgurukulonline_nurse_hiring_systemMatch1.0
VendorProductVersionCPE
phpgurukulonline_nurse_hiring_system1.0cpe:/a:phpgurukul:online_nurse_hiring_system:1.0:::

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

43.8%

Related for CVE-2023-37685