Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-2566
HistoryMay 08, 2023 - 12:00 a.m.

CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr

2023-05-0800:00:00
CWE-79
@huntrdev
www.cve.org
3
cve-2023-2566
cross-site scripting
stored
openemr
github
repository
prior to 7.0.1

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0.017

Percentile

88.0%

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

CNA Affected

[
  {
    "vendor": "openemr",
    "product": "openemr/openemr",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "7.0.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0.017

Percentile

88.0%

Related for CVELIST:CVE-2023-2566