CVE-2023-23074

creationtimestamp| type| source ---|---|--- 2023-02-01 22:14:15+00:00| seen| https://t.me/cibsecurity/57343...

CVE-2023-23074

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component...

CVE-2023-23074

CVE-2023-23074 is a cross-site scripting (XSS) vulnerability affecting Zoho ManageEngine ServiceDesk Plus 14, caused by embedding videos in the language component. Public sources from Red Hat and Nessus identify affected versions as ServiceDesk Plus prior to 14.1 Build 14104. The CVSS v3.1 base s...

CVE-2021-23074

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-23074

creationtimestamp| type| source ---|---|--- 2022-06-21 14:37:22+00:00| seen| https://t.me/cibsecurity/44870...

CVE-2022-23074 Recipes - Stored XSS in Name Parameter

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and...

CVE-2022-23074

Recipes CVE-2022-23074 affects versions 0.17.0–1.2.5, with Stored XSS in the Name field of Keyword, Food, and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, an XSS payload can be triggered. A low-privilege attacker could obtain the victim’s API key, potentially leading t...