Lucene search

GoogleOSV:CVE-2023-3838

HistoryJul 23, 2023 - 2:15 a.m.

CVE-2023-3838

2023-07-2302:15:11

Google

osv.dev

vulnerability

dedebiz 6.2.10

admin

cross site scripting

remote exploit

public disclosure

vdb-235189

vendor contacted

3.3 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/vote_edit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235189 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
dedev6eq6.0.0
dedev6eq6.1.9
dedev6eq6.1.0
dedev6eq6.0.3
dedev6eq6.1.1
dedev6eq6.2.10
dedev6eq6.2.6
dedev6eq6.0.2
dedev6eq6.1.7
dedev6eq6.2.5

Name	Operator	Version
dedev6	eq	6.0.0
dedev6	eq	6.1.9
dedev6	eq	6.1.0
dedev6	eq	6.0.3
dedev6	eq	6.1.1
dedev6	eq	6.2.10
dedev6	eq	6.2.6
dedev6	eq	6.0.2
dedev6	eq	6.1.7
dedev6	eq	6.2.5

Rows per page:

1-10 of 141

References

github.com/TXPH/CVE/blob/main/xss-report2.pdf

vuldb.com/?ctiid.235189

vuldb.com/?id.235189

3.3 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for OSV:CVE-2023-3838