Lucene search

GoogleOSV:CVE-2023-27711

HistoryMar 16, 2023 - 3:15 p.m.

CVE-2023-27711

2023-03-1615:15:10

Google

osv.dev

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

39.5%

JSON

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component.

CPENameOperatorVersion
typechoeq1.1-17.10.30-release
typechoeq0.9-13.12.1-beta
typechoeq0.9-13.12.6-rc
typechoeq1.1-17.10.29-release
typechoeq1.2.0-rc.1
typechoeqci
typechoeq1.2.0-beta.1
typechoeq1.2.0-rc.2
typechoeq1.1-15.5.12-beta
typechoeq1.0-14.10.10-release

Name	Operator	Version
typecho	eq	1.1-17.10.30-release
typecho	eq	0.9-13.12.1-beta
typecho	eq	0.9-13.12.6-rc
typecho	eq	1.1-17.10.29-release
typecho	eq	1.2.0-rc.1
typecho	eq	ci
typecho	eq	1.2.0-beta.1
typecho	eq	1.2.0-rc.2
typecho	eq	1.1-15.5.12-beta
typecho	eq	1.0-14.10.10-release

Rows per page:

1-10 of 171

References

github.com/typecho/typecho/issues/1539

srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid/

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

39.5%

JSON

Related for OSV:CVE-2023-27711