CVE-2023-27888

2023-05-1000:00:00

jpcert

www.cve.org

cross-site scripting

remote attacker

arbitrary script

message memo function

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

Cross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote authenticated attacker to inject an arbitrary script via Message Memo function of the affected product.

CNA Affected

[
  {
    "vendor": "SiteBridge Inc.",
    "product": "Joruri Gw",
    "versions": [
      {
        "version": "Ver 3.2.5 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

joruri-pwm.jp/org/docs/2022093000017/

jvn.jp/en/jp/JVN87559956/