Lucene search
+L

12 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-41883

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00382EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2021-21434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in t...

4.8CVSS6.2AI score0.00659EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-38057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript...

5.4CVSS5.6AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/24 9:15 a.m.•9 views

CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS5.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/24 9:15 a.m.•24 views

CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS4.8AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/24 9:15 a.m.•12 views

UBUNTU-CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS5.3AI score0.00382EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/24 9:15 a.m.•34 views

Cross site scripting

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

4.9CVSS5.3AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/24 8:27 a.m.•20 views

CVE-2023-38057 XSS stored in survey answers

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

4.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/24 8:27 a.m.•46 views

CVE-2023-38057 XSS stored in survey answers

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

4.1CVSS5.5AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/24 12:00 a.m.•1 views

CVE-2023-38057: Improper Input Validation

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS5.2AI score0.00382EPSS
SaveExploits0References3
OSV
OSV
•added 2021/02/08 11:15 a.m.•12 views

CVE-2021-21434

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in the survey. This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions...

4.8CVSS5.8AI score0.00659EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/08 11:15 a.m.•17 views

UBUNTU-CVE-2021-21434

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in the survey. This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions...

4.8CVSS5.8AI score0.00659EPSS
SaveExploits0References3
Rows per page
Query Builder