Lucene search
FreeBSDA5E13973-6C75-11EF-858B-23EEBA13701AHistorySep 03, 2024 - 12:00 a.m.
forgejo -- multiple vulnerabilities
2024-09-0300:00:00
vuxml.freebsd.org
2
v-html
v-text
search inputbox
upgrade webpack
cve-2024-43788
exploit
forgejo
precaution
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
AI Score
6.8
Confidence
Low
Problem Description:
Replace v-html with v-text in search inputbox
Upgrade webpack to v5.94.0 as a precaution to mitigate
CVE-2024-43788, although we were not yet able to confirm that this
can be exploited in Forgejo.
Related
osv
osv
CGA-9rjf-f92q-2cm7
2024-09-16 18:05:27
CGA-h43v-8hrp-cpgc
2024-09-16 18:05:28
forgejo-8.0.3-1.1 on GA media
2024-09-10 00:00:00
veracode
veracode
Cross Site Scripting(XSS)
2024-08-28 03:33:54
nvd
nvd
CVE-2024-43788
2024-08-27 17:15:07
redhatcve
redhatcve
CVE-2024-43788
2024-08-27 18:59:57
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2024-43788
2024-08-27 00:00:00
debiancve
debiancve
CVE-2024-43788
2024-08-27 17:15:07
nessus
nessus
github
github
vulnrichment
vulnrichment
cve
cve
CVE-2024-43788
2024-08-27 17:15:07
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
AI Score
6.8
Confidence
Low
Related for A5E13973-6C75-11EF-858B-23EEBA13701A