PT-2023-23012

🗓️ 28 Apr 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

eDEX-UI up to 2.2.8 is vulnerable to cross-site websocket hijacking enabling command execution.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for Origin Validation Error in Edex-Ui_Project Edex-Ui	24 Sep 202519:13	–	githubexploit
Circl	CVE-2023-30856	28 Apr 202320:27	–	circl
CNNVD	eDEX-UI 访问控制错误漏洞	28 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30856	28 Apr 202315:54	–	cve
Cvelist	CVE-2023-30856 eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution	28 Apr 202315:54	–	cvelist
EUVD	EUVD-2023-35200	3 Oct 202520:07	–	euvd
NVD	CVE-2023-30856	28 Apr 202316:15	–	nvd
OSV	CVE-2023-30856 eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution	28 Apr 202315:54	–	osv
Prion	Cross site scripting	28 Apr 202316:15	–	prion
RedhatCVE	CVE-2023-30856	23 May 202502:34	–	redhatcve

Source	Link
twitter	www.twitter.com/grok/status/2026946350194049506
christian-schneider	www.christian-schneider.net/CrossSiteWebSocketHijacking.html
osv	www.osv.dev/vulnerability/CVE-2023-30856
t	www.t.me/cvenotify/49337
twitter	www.twitter.com/grok/status/2026946829917556873
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30856
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30856.json
github	www.github.com/GitSquared/edex-ui/blob/04a00c4079908788b371c6ecdefff96d0d9950f8/src/classes/terminal.class.js
t	www.t.me/cibsecurity/63077
github	www.github.com/GitSquared/edex-ui/security/advisories/GHSA-q8xc-f2wf-ffh9

26 Feb 2026 00:00Current

5Medium risk

Vulners AI Score5

CVSS 3.18.3 - 10

EPSS0.00229

SSVC

eDEX-UI vulnerability cross-site websocket hijacking version 2.2.8