Lucene search

[email protected]CVE-2023-49029

HistoryNov 27, 2023 - 4:15 p.m.

CVE-2023-49029

2023-11-2716:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-49029

cross site scripting

smpn1smg

absis

remote code execution

security vulnerability

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

JSON

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file.

Affected configurations

NVD

Node

smpn1smgabsisRange≤2017-10-19

CPENameOperatorVersion
smpn1smg:absissmpn1smg absisle2017-10-19

CPE	Name	Operator	Version
smpn1smg:absis	smpn1smg absis	le	2017-10-19

References

gist.github.com/Chiaki2333/717b83b800180e1a4c3ee5f6e49f95c0

github.com/Chiaki2333/vulnerability/blob/main/smpn1smg-absis-XSS-lock.php-nama.md

github.com/smpn1smg/absis

Social References

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

JSON

Related for CVE-2023-49029

prion1 cvelist1 nvd1