CVE-2023-38569

2023-09-0510:15:07

Google

osv.dev

cve-2023-38569

cross-site scripting

vulnerability

shirasagi

authentication

remote attacker

arbitrary script

web browser

software

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

CPENameOperatorVersion
shirasagieq1.14.0-RC
shirasagieq1.7.0-RC
shirasagieq1.2.1
shirasagieq1.12.2
shirasagieq1.1.0
shirasagieq1.7.0
shirasagieq0.3.0
shirasagieq0.2.0
shirasagieq1.17.0-RC
shirasagieq1.10.0

Name	Operator	Version
shirasagi	eq	1.14.0-RC
shirasagi	eq	1.7.0-RC
shirasagi	eq	1.2.1
shirasagi	eq	1.12.2
shirasagi	eq	1.1.0
shirasagi	eq	1.7.0
shirasagi	eq	0.3.0
shirasagi	eq	0.2.0
shirasagi	eq	1.17.0-RC
shirasagi	eq	1.10.0