Lucene search
INCDVULNRICHMENT:CVE-2023-37221HistorySep 03, 2023 - 1:55 p.m.
CVE-2023-37221 7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
2023-09-0313:55:27
CWE-79
INCD
github.com
cwe-79
cross-site scripting
7twenty bot
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).
Related
nvd
nvd
CVE-2023-37221
2023-09-03 14:15:42
cve
cve
CVE-2023-37221
2023-09-03 14:15:42
prion
prion
Cross site scripting
2023-09-03 14:15:00
cvelist
cvelist
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-37221