Lucene search
PRIOn knowledge basePRION:CVE-2023-5950HistoryNov 06, 2023 - 3:15 p.m.
Cross site scripting
2023-11-0615:15:00
PRIOn knowledge base
www.prio-n.com
1
rapid7 velociraptor
cross site scripting
reflected
vulnerability
unauthorized execution
patch available
version 0.7.0-4
patch
Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user’s web browser. This vulnerability is fixed in version 0.7.0-04 and a patch is available to download. Patches are also available for version 0.6.9 (0.6.9-1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| velociraptor | eq | 0.7.0-3 | |
| velociraptor | eq | 0.7.0 rc1 | |
| velociraptor | eq | 0.7.0 | |
| velociraptor | eq | < 0.6.9-1 |
Related
rapid7blog
rapid7blog
CVE-2023-5950 Rapid7 Velociraptor Reflected XSS
2023-11-10 18:56:15
osv
osv
CVE-2023-5950
2023-11-06 15:15:14
nvd
nvd
CVE-2023-5950
2023-11-06 15:15:14
veracode
veracode
Cross-site Scripting (XSS)
2023-11-08 08:20:02
cvelist
cvelist
CVE-2023-5950 Rapid7 Velociraptor Reflected XSS
2023-11-06 14:30:28
cve
cve
CVE-2023-5950
2023-11-06 15:15:14