Lucene search

K
cvelistINCIBECVELIST:CVE-2023-4564
HistoryOct 03, 2023 - 3:22 p.m.

CVE-2023-4564 Multiple vulnerabilities in Canopsis of Capensis

2023-10-0315:22:48
CWE-79
INCIBE
www.cve.org
2
canopsis capensis
multiple vulnerabilities
attacker
malicious javascript payload
broadcast message parameter
admin panel

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

18.6%

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Canopsis",
    "vendor": "Capensis",
    "versions": [
      {
        "status": "affected",
        "version": "23.04-alpha3"
      }
    ]
  }
]

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

18.6%

Related for CVELIST:CVE-2023-4564