Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-29452
HistoryJul 13, 2023 - 12:00 a.m.

CVE-2023-29452

2023-07-1300:00:00
ubuntu.com
ubuntu.com
4
geomap
html
attribution
tile
unix

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

0.0005 Low

EPSS

Percentile

18.1%

Currently, geomap configuration (Administration -> General -> Geographical
maps) allows using HTML in the field “Attribution text” when selected
“Other” Tile provider.

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchzabbix< anyUNKNOWN

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

0.0005 Low

EPSS

Percentile

18.1%

Related for UB:CVE-2023-29452