Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-5556
HistoryOct 12, 2023 - 10:32 a.m.

CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises

2023-10-1210:32:21
CWE-79
@huntrdev
www.cve.org
4
cve-2023-5556
cross-site scripting
reflected
github
repository
prior to 3194

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

34.3%

Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194.

CNA Affected

[
  {
    "vendor": "structurizr",
    "product": "structurizr/onpremises",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3194",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

34.3%

Related for CVELIST:CVE-2023-5556