Lucene search
MitreVULNRICHMENT:CVE-2023-45471HistoryOct 20, 2023 - 12:00 a.m.
CVE-2023-45471
2023-10-2000:00:00
mitre
github.com
1
qad search server
stored cross-site scripting
version 1.0.0.315
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
31.8%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a new index and inject a malicious web script into its name, that will execute whenever a user accesses the search page.
References
Related
cve
cve
CVE-2023-45471
2023-10-20 04:15:10
prion
prion
Cross site scripting
2023-10-20 04:15:00
cvelist
cvelist
CVE-2023-45471
2023-10-20 00:00:00
nvd
nvd
CVE-2023-45471
2023-10-20 04:15:10
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
31.8%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-45471