Lucene search
MitreCVE-2023-48003HistoryDec 26, 2023 - 10:15 p.m.
CVE-2023-48003
2023-12-2622:15:13
CWE-601
mitre
web.nvd.nist.gov
22
cve-2023-48003
open redirect
html injection
asp.net zero
security vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
40.9%
An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the ‘<meta http-equiv=“refresh”’ in the WebSocket messages.
Affected configurations
Node
aspnetzeroasp.net_zeroRange<12.3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aspnetzero | asp.net_zero | * | cpe:2.3:a:aspnetzero:asp.net_zero:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-48003
2023-12-26 00:00:00
prion
prion
Open redirect
2023-12-26 22:15:00
nvd
nvd
CVE-2023-48003
2023-12-26 22:15:13
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
40.9%
Related for CVE-2023-48003