Lucene search
GoogleOSV:CVE-2023-52322HistoryJan 04, 2024 - 7:15 a.m.
CVE-2023-52322
2024-01-0407:15:09
Google
osv.dev
5
spip
xss
input restriction
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.8%
ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.
Related
cvelist
cvelist
CVE-2023-52322
2024-01-04 00:00:00
prion
prion
Design/Logic Flaw
2024-01-04 07:15:00
ubuntucve
ubuntucve
CVE-2023-52322
2024-01-04 00:00:00
osv
osv
spip - security update
2024-03-15 00:00:00
nessus
nessus
Debian dla-3761 : spip - security update
2024-03-15 00:00:00
cve
cve
CVE-2023-52322
2024-01-04 07:15:09
veracode
veracode
Cross Site Scripting(XSS)
2024-01-13 19:37:27
debian
debian
[SECURITY] [DLA 3761-1] spip security update
2024-03-15 14:54:26
nvd
nvd
CVE-2023-52322
2024-01-04 07:15:09
openvas
openvas
SPIP < 4.1.13, 4.2.x < 4.2.7 XSS Vulnerability
2024-01-09 00:00:00
Debian: Security Advisory (DLA-3761-1)
2024-03-18 00:00:00
debiancve
debiancve
CVE-2023-52322
2024-01-04 07:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.8%
Related for OSV:CVE-2023-52322