Lucene search
MitreCVE-2023-50465HistoryDec 11, 2023 - 1:15 a.m.
CVE-2023-50465
2023-12-1101:15:07
CWE-79
mitre
web.nvd.nist.gov
13
cve-2023-50465
stored xss
monica
monicahq
4.0.0
svg
authenticated user
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.0%
A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.
Affected configurations
Node
monicahqmonicaMatch0.4.0
Related
osv
osv
CVE-2023-50465
2023-12-11 01:15:07
prion
prion
Cross site scripting
2023-12-11 01:15:00
cvelist
cvelist
CVE-2023-50465
2023-12-11 00:00:00
nvd
nvd
CVE-2023-50465
2023-12-11 01:15:07
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.0%
Related for CVE-2023-50465