Lucene search

MitreCVE-2023-29637

HistoryMay 01, 2023 - 4:15 p.m.

CVE-2023-29637

2023-05-0116:15:11

CWE-79

mitre

web.nvd.nist.gov

cve

2023

29637

cross site scripting

xss

vulnerability

qbian61

forum

java

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.2%

JSON

Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the “article editor” page.

Affected configurations

Nvd

Node

qbian61_forum-java_projectqbian61_forum-javaMatch-

VendorProductVersionCPE
qbian61_forum-java_projectqbian61_forum-java-cpe:2.3:a:qbian61_forum-java_project:qbian61_forum-java:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qbian61_forum-java_project	qbian61_forum-java	-	cpe:2.3:a:qbian61_forum-java_project:qbian61_forum-java:-:::::::*

References

github.com/Qbian61/forum-java/issues/13

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.2%

JSON

Related for CVE-2023-29637