Design/Logic Flaw

2023-11-1804:15:00

PRIOn knowledge base

www.prio-n.com

opencrx

version 5.2.0

html injection

product configuration name field

vulnerability

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.

CPENameOperatorVersion
opencrxeq5.2.0

CPE	Name	Operator	Version
	opencrx	eq	5.2.0

References

www.esecforte.com/cve-2023-40817-html-injection-product-configuration/