Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-30791
HistoryJul 15, 2023 - 7:15 p.m.

Hardcoded credentials

2023-07-1519:15:00
PRIOn knowledge base
www.prio-n.com
1
hardcoded credentials
plane version 0.7.1-dev
vulnerability
profile avatar change
html-javascript file upload

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.

CPENameOperatorVersion
planeeq0.7.1

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

Related for PRION:CVE-2023-30791