Lucene search

GoogleOSV:CVE-2023-34840

HistoryJun 30, 2023 - 4:15 p.m.

CVE-2023-34840

2023-06-3016:15:09

Google

osv.dev

angular-ui-notification

cross-site scripting

v0.1.0

v0.2.0

v0.3.6

cve-2023-34840

software

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
angular-ui-notificationeq0.0.2
angular-ui-notificationeq0.0.10
angular-ui-notificationeq0.0.12
angular-ui-notificationeq0.1.0
angular-ui-notificationeq0.0.4
angular-ui-notificationeq0.0.11
angular-ui-notificationeq0.0.8
angular-ui-notificationeq0.0.5
angular-ui-notificationeq0.0.7
angular-ui-notificationeq0.2.0

Name	Operator	Version
angular-ui-notification	eq	0.0.2
angular-ui-notification	eq	0.0.10
angular-ui-notification	eq	0.0.12
angular-ui-notification	eq	0.1.0
angular-ui-notification	eq	0.0.4
angular-ui-notification	eq	0.0.11
angular-ui-notification	eq	0.0.8
angular-ui-notification	eq	0.0.5
angular-ui-notification	eq	0.0.7
angular-ui-notification	eq	0.2.0

Rows per page:

1-10 of 131

References

alexcrack.com

github.com/alexcrack/angular-ui-notification

github.com/Xh4H/CVE-2023-34840

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Related for OSV:CVE-2023-34840