Lucene search

[email protected]CVE-2023-43193

HistoryNov 02, 2023 - 12:15 p.m.

CVE-2023-43193

2023-11-0212:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-43193

submitty

xss

cross site scripting

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.8 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.

CPENameOperatorVersion
rcos:submittyrcos submittylt22.06.00
rcos:submittyrcos submittyeq19.09.03
rcos:submittyrcos submittyeq20.12.00
rcos:submittyrcos submittyeq21.09.00
rcos:submittyrcos submittyeq21.10.01
rcos:submittyrcos submittyeq21.08.01
rcos:submittyrcos submittyeq21.07.00
rcos:submittyrcos submittyeq21.11.01
rcos:submittyrcos submittyeq21.03.00
rcos:submittyrcos submittyeq21.06.02

CPE	Name	Operator	Version
rcos:submitty	rcos submitty	lt	22.06.00
rcos:submitty	rcos submitty	eq	19.09.03
rcos:submitty	rcos submitty	eq	20.12.00
rcos:submitty	rcos submitty	eq	21.09.00
rcos:submitty	rcos submitty	eq	21.10.01
rcos:submitty	rcos submitty	eq	21.08.01
rcos:submitty	rcos submitty	eq	21.07.00
rcos:submitty	rcos submitty	eq	21.11.01
rcos:submitty	rcos submitty	eq	21.03.00
rcos:submitty	rcos submitty	eq	21.06.02

Rows per page:

1-10 of 1171

References

fuchai.net/cve/CVE-2023-43193

github.com/Submitty/Submitty/pull/8032

Social References

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.8 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-43193

cvelist1 prion1 osv1