Lucene search
TR-CERTCVE-2023-6011HistoryNov 22, 2023 - 9:15 a.m.
CVE-2023-6011
2023-11-2209:15:07
CWE-79
TR-CERT
web.nvd.nist.gov
25
cve-2023-6011
stored xss
dece software geodi
web page generation
cross-site scripting
vulnerability
nvd
security
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in DECE Software Geodi allows Stored XSS.This issue affects Geodi: before 8.0.0.27396.
Affected configurations
Node
decegeodiRange<8.0.0.27396
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Geodi",
"vendor": "DECE Software",
"versions": [
{
"lessThan": "8.0.0.27396",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Cross site scripting
2023-11-22 09:15:00
nvd
nvd
CVE-2023-6011
2023-11-22 09:15:07
cvelist
cvelist
CVE-2023-6011 Stored XSS in Geodi
2023-11-22 09:06:44
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2023-6011