Lucene search

CVE-2023-32193 Norman API Cross-site Scripting Vulnerability

🗓️ 16 Oct 2024 12:13:27Reported by suseType

Norman API XSS Vulnerability CVE-2023-32193

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2023-32193 Norman API Cross-site Scripting Vulnerability	16 Oct 202412:27	–	cvelist
OSV	Cross-site scripting in public API in github.com/rancher/norman	20 Feb 202417:50	–	osv
OSV	Norman API Cross-site Scripting Vulnerability	8 Feb 202418:45	–	osv
OSV	CGA-9p63-fmhc-fjmf	25 Sep 202405:19	–	osv
OSV	CGA-rg66-q68h-9c34	25 Sep 202405:33	–	osv
Github Security Blog	Norman API Cross-site Scripting Vulnerability	8 Feb 202418:45	–	github
CVE	CVE-2023-32193	16 Oct 202413:15	–	cve
NVD	CVE-2023-32193	16 Oct 202413:15	–	nvd
Veracode	Cross Site Scripting (XSS)	9 Feb 202405:22	–	veracode

[
  {
    "cpes": [
      "cpe:2.3:a:rancher:norman:*:*:*:*:*:*:*:*"
    ],
    "vendor": "rancher",
    "product": "norman",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "0.0.0-20240207153100-3bb70b772b52",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
github	www.github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6
bugzilla	www.bugzilla.suse.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2024 12:27Current

7.1High risk

Vulners AI Score7.1

CVSS38.3

EPSS0.0004

SSVC

CWE-80