Lucene search

GreenRocketSecurityCVELIST:CVE-2023-4951

HistorySep 14, 2023 - 4:43 p.m.

CVE-2023-4951 Cross Site Scripting (XSS) Issue on "Client Based Authentication Policy Configuration" Screen

2023-09-1416:43:40

CWE-79

GreenRocketSecurity

www.cve.org

cve-2023-4951

cross site scripting

greenradius

authentication

pagination

web admin interface

2 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

A cross site scripting issue was discovered with the pagination function on the “Client-based Authentication Policy Configuration” screen of the GreenRADIUS web admin interface. This issue is found in GreenRADIUS v5.1.1.1 and prior. A fix was included in v5.1.2.2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GreenRADIUS",
    "vendor": "Green Rocket Security",
    "versions": [
      {
        "lessThanOrEqual": "5.1.1.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

greenrocketsecurity.com/cve-2023-4951/

2 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Related for CVELIST:CVE-2023-4951