Lucene search

MitreCVE-2023-43971

HistoryJul 17, 2024 - 10:15 p.m.

CVE-2023-43971

2024-07-1722:15:03

CWE-79

mitre

web.nvd.nist.gov

acg-faka

xss

remote code execution

index.php

encode parameter

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON

Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.

Affected configurations

Nvd

Node

lizhipayacg-fakaMatch1.1.7

VendorProductVersionCPE
lizhipayacg-faka1.1.7cpe:2.3:a:lizhipay:acg-faka:1.1.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lizhipay	acg-faka	1.1.7	cpe:2.3:a:lizhipay:acg-faka:1.1.7:::::::*

References

gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b

github.com/lizhipay/acg-faka/issues/72

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON

Related for CVE-2023-43971