CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0741

CVE-2023-0741 : Cross-site Scripting (XSS) via DOM in the GitHub repository answerdev/answer prior to version 1.0.4 . Root cause is a DOM-based XSS vulnerability in the client-side code, enabling attacker-controlled script execution within a user session. The vulnerability is described as affecti...

CVE-2023-0740

CVE-2023-0740 describes a stored Cross-site Scripting (XSS) vulnerability in the open‑source project answerdev/answer prior to version 1.0.4 . Multiple sources (NVD, Red Hat, GHSA, OSV, PT‑Security, PRION) corroborate that inputs could be injected and stored, leading to script execution affecting...

CVE-2023-0739

CVE-2023-0739 affects the GitHub project answerdev/answer prior to 1.0.4. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to potential integrity and availability impacts. The vulnerability is documented across multiple so...

CVE-2023-0743

CVE-2023-0743 is a Cross-site Scripting (XSS) vulnerability in the GitHub repository answerdev/answer prior to version 1.0.4. The issue affects the answer project’s web UI/input handling and is described with high-severity CVSS metrics (C/H, I/H, A/H, user interaction required). The connected doc...

CVE-2023-0744

CVE-2023-0744 affects the GitHub repo answerdev/answer prior to version 1.0.4, enabling an Improper Access Control that can lead to account takeover via the password-reset flow. Public references describe an endpoint abuse: an attacker can trigger password reset via answer/api/v1/user/password/re...

CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0740 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0744 Improper Access Control in answerdev/answer

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0742 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer

Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...