Lucene search

MitreCVE-2023-40819

HistoryAug 06, 2024 - 2:16 p.m.

CVE-2023-40819

2024-08-0614:16:03

CWE-233

CWE-79

mitre

web.nvd.nist.gov

id4portais

vulnerability

version

html injection

unsanitized message parameter

response

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

17.7%

JSON

ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.

Affected configurations

Nvd

Node

devlop.systemsid4portaisRange≤2022.837.002a

VendorProductVersionCPE
devlop.systemsid4portais*cpe:2.3:a:devlop.systems:id4portais:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
devlop.systems	id4portais	*	cpe:2.3:a:devlop.systems:id4portais::::::::

References

miguelsantareno.github.io/id4Portais.txt

www.id4software.com/

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2023-40819