Lucene search

K
nvd[email protected]NVD:CVE-2023-1051
HistoryMar 23, 2023 - 7:15 a.m.

CVE-2023-1051

2023-03-2307:15:12
CWE-79
web.nvd.nist.gov
cve-2023-1051
improper neutralization of input
web report system
reflected xss

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

27.3%

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10.

Affected configurations

NVD
Node
askocweb_report_systemRange<23.03.10

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

27.3%

Related for NVD:CVE-2023-1051