Lucene search

K
osvGoogleOSV:CVE-2023-46448
HistoryNov 01, 2023 - 10:15 p.m.

CVE-2023-46448

2023-11-0122:15:08
Google
osv.dev
10
cve-2023-46448
reflected cross-site scripting
dmpop mejiro commit
arbitrary code execution
uploaded images
software vulnerability

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images.

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for OSV:CVE-2023-46448