Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0746
HistoryMar 10, 2023 - 4:15 p.m.

Cross site scripting

2023-03-1016:15:00
PRIOn knowledge base
www.prio-n.com
6
gigavue-fm
gigavue-os
software version 5.0 202
authenticated user
malicious javascript code
uri
reflected cross site scripting
nvd

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

CPENameOperatorVersion
gigavue-oseq5.0.202

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

Related for PRION:CVE-2023-0746