Lucene search

CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta

🗓️ 01 Feb 2023 00:29:38Reported by GitHub_MType

Cross-site (XSS) vulnerability in Express API with Et

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2023-23630	1 Feb 202301:15	–	osv
OSV	XSS Attack with Express API	31 Jan 202322:39	–	osv
CVE	CVE-2023-23630	1 Feb 202301:15	–	cve
NVD	CVE-2023-23630	1 Feb 202301:15	–	nvd
Vulnrichment	CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta	1 Feb 202300:38	–	vulnrichment
Prion	Design/Logic Flaw	1 Feb 202301:15	–	prion
Veracode	Cross-site Scripting (XSS)	6 Feb 202306:25	–	veracode
Github Security Blog	XSS Attack with Express API	31 Jan 202322:39	–	github

[
  {
    "vendor": "eta-dev",
    "product": "eta",
    "versions": [
      {
        "version": "< 2.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/eta-dev/eta/releases/tag/v2.0.0
github	www.github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd
github	www.github.com/eta-dev/eta/security/advisories/GHSA-xrh7-m5pp-39r6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Feb 2023 00:38Current

8.5High risk

Vulners AI Score8.5

CVSS38.6

EPSS0.0014

CWE-79