Lucene search

VulDBCVE-2023-3827

HistoryJul 22, 2023 - 9:15 a.m.

CVE-2023-3827

2023-07-2209:15:09

CWE-79

VulDB

web.nvd.nist.gov

cve-2023-3827

bug finder listplace

directory listing platform

http post request handler

cross site scripting

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.0%

JSON

A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /listplace/user/ticket/create of the component HTTP POST Request Handler. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235148. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Vulners

Node

bugfinderlistplace_directory_listing_platformMatch3.0

VendorProductVersionCPE
bugfinderlistplace_directory_listing_platform3.0cpe:2.3:a:bugfinder:listplace_directory_listing_platform:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bugfinder	listplace_directory_listing_platform	3.0	cpe:2.3:a:bugfinder:listplace_directory_listing_platform:3.0:::::::*

CNA Affected

[
  {
    "vendor": "Bug Finder",
    "product": "Listplace Directory Listing Platform",
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

References

vuldb.com/?ctiid.235148

vuldb.com/?id.235148

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.0%

JSON

Related for CVE-2023-3827