Lucene search

VulDBCVELIST:CVE-2023-3784

HistoryJul 20, 2023 - 8:02 a.m.

CVE-2023-3784 Dooblou WiFi File Explorer cross site scripting

2023-07-2008:02:02

CWE-79

VulDB

www.cve.org

dooblou wifi file explorer

cross site scripting

remote exploit

vdb-235051

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235051.

CNA Affected

[
  {
    "vendor": "Dooblou",
    "product": "WiFi File Explorer",
    "versions": [
      {
        "version": "1.13.3",
        "status": "affected"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Jul/37

vuldb.com/?ctiid.235051

vuldb.com/?id.235051

www.vulnerability-lab.com/get_content.php?id=2317

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

Related for CVELIST:CVE-2023-3784