CVE-2023-31302

2023-12-2906:15:43

CWE-79

[email protected]

web.nvd.nist.gov

xss

sesami cash point

transport optimizer

teller field

remote attackers

arbitrary code

vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.8%

JSON

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.

Affected configurations

Nvd

Node

sesamicash_point_\&_transport_optimizerMatch6.3.8.6.718

VendorProductVersionCPE
sesamicash_point_\&_transport_optimizer6.3.8.6.718cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:*