Lucene search

K
osvGoogleOSV:CVE-2023-30394
HistoryMay 11, 2023 - 7:15 p.m.

CVE-2023-30394

2023-05-1119:15:09
Google
osv.dev
4
moveit
ros
xss
vulnerability
api authentication

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.2%

The MoveIt framework 1.1.11 for ROS allows cross-site scripting (XSS) via the API authentication function.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.2%

Related for OSV:CVE-2023-30394