Lucene search

K
cveMitreCVE-2023-49214
HistoryNov 23, 2023 - 10:15 p.m.

CVE-2023-49214

2023-11-2322:15:07
CWE-74
mitre
web.nvd.nist.gov
12
usedesk
chat
template
injection
security
cve-2023-49214
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

39.1%

Usedesk before 1.7.57 allows chat template injection.

Affected configurations

Nvd
Node
usedeskusedeskRange<1.7.57
VendorProductVersionCPE
usedeskusedesk*cpe:2.3:a:usedesk:usedesk:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

39.1%

Related for CVE-2023-49214