Lucene search

Neos CMS Cross Site Scripting vulnerability

🗓️ 19 Sep 2023 00:13:30Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Neos CMS 8.3.3 XSS vulnerability via SVG file uploa

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2023-37611	18 Sep 202322:15	–	nvd
OSV	BIT-neos-2023-37611	6 Mar 202410:58	–	osv
OSV	CVE-2023-37611	18 Sep 202322:15	–	osv
Github Security Blog	Neos CMS Cross Site Scripting vulnerability	19 Sep 202300:30	–	github
Prion	Cross site scripting	18 Sep 202322:15	–	prion
Cvelist	CVE-2023-37611	18 Sep 202300:00	–	cvelist
CVE	CVE-2023-37611	18 Sep 202322:15	–	cve

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-37611
github	www.github.com/neos/neos-development-collection/issues/4833
github	www.github.com/neos/neos-development-collection/pull/4812
github	www.github.com/neos/neos-development-collection/commit/4ac0df04d2e44e164e95887b466075dde3f04045
cheatsheetseries	www.cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html
digi	www.digi.ninja/blog/svg_xss.php
github	www.github.com/neos/neos-development-collection
github	www.github.com/neos/neos-ui/releases/tag/8.3.4
rodelllemit	www.rodelllemit.medium.com/stored-xss-in-neo-cms-8-3-3-9bd1cb973c5b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Sep 2023 00:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS35.4

EPSS0.00134