Lucene search
NCSC.chVULNRICHMENT:CVE-2023-37875HistorySep 12, 2023 - 8:17 a.m.
CVE-2023-37875 Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0
2023-09-1208:17:22
CWE-116
NCSC.ch
github.com
cve-2023-37875
cross-site scripting
wing ftp server
CVSS3
3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0.
References
Related
nvd
nvd
CVE-2023-37875
2023-09-12 09:15:07
cve
cve
CVE-2023-37875
2023-09-12 09:15:07
prion
prion
Cross site scripting
2023-09-12 09:15:00
cvelist
cvelist
CVSS3
3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-37875