Lucene search

K
vulnrichmentFluid AttacksVULNRICHMENT:CVE-2023-44173
HistorySep 28, 2023 - 8:55 p.m.

CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)

2023-09-2820:55:48
CWE-79
Fluid Attacks
github.com
1
cross-site scripting
vulnerability
online ticket booking

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

6.3

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Online Movie Ticket Booking System v1.0 is vulnerable to

an authenticated Reflected Cross-Site Scripting vulnerability.

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

6.3

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-44173