CVE-2023-39166

2023-11-1317:15:07

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-39166

csrf

tagdiv composer

xss

vulnerability

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

0.0005 Low

EPSS

Percentile

17.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue affects tagDiv Composer: from n/a before 4.4.

Affected configurations

Vulners

NVD

Node

tagdivtagdiv_composerRange<4.4

VendorProductVersionCPE
tagdivtagdiv_composer*cpe:2.3:a:tagdiv:tagdiv_composer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tagdiv	tagdiv_composer	*	cpe:2.3:a:tagdiv:tagdiv_composer::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "tagDiv Composer",
    "vendor": "tagDiv",
    "versions": [
      {
        "changes": [
          {
            "at": "4.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "4.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]