Lucene search

[email protected]NVD:CVE-2023-43971

HistoryJul 17, 2024 - 10:15 p.m.

CVE-2023-43971

2024-07-1722:15:03

CWE-79

[email protected]

web.nvd.nist.gov

cross site scripting

acg-faka v1.1.7

index.php

remote attacker

arbitrary code execution

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.8%

JSON

Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.

Affected configurations

Nvd

Node

lizhipayacg-fakaMatch1.1.7

VendorProductVersionCPE
lizhipayacg-faka1.1.7cpe:2.3:a:lizhipay:acg-faka:1.1.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lizhipay	acg-faka	1.1.7	cpe:2.3:a:lizhipay:acg-faka:1.1.7:::::::*

References

gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b

github.com/lizhipay/acg-faka/issues/72

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.8%

JSON

Related for NVD:CVE-2023-43971

cve1 cvelist1 vulnrichment1