CVE-2023-36492

2023-09-0510:15:07

Google

osv.dev

cross-site scripting

vulnerability

shirasagi

remote attacker

arbitrary script

web browser

user logging in

software

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

CPENameOperatorVersion
shirasagieq1.14.0-RC
shirasagieq1.7.0-RC
shirasagieq1.2.1
shirasagieq1.12.2
shirasagieq1.1.0
shirasagieq1.7.0
shirasagieq0.3.0
shirasagieq0.2.0
shirasagieq1.17.0-RC
shirasagieq1.10.0

Name	Operator	Version
shirasagi	eq	1.14.0-RC
shirasagi	eq	1.7.0-RC
shirasagi	eq	1.2.1
shirasagi	eq	1.12.2
shirasagi	eq	1.1.0
shirasagi	eq	1.7.0
shirasagi	eq	0.3.0
shirasagi	eq	0.2.0
shirasagi	eq	1.17.0-RC
shirasagi	eq	1.10.0