Lucene search

VulDBCVE-2023-3829

HistoryJul 22, 2023 - 12:15 p.m.

CVE-2023-3829

2023-07-2212:15:09

CWE-79

VulDB

web.nvd.nist.gov

cve-2023-3829

bug finder icogenie

vulnerability

cross site scripting

remote code execution

nvd

security advisory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.0%

JSON

A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated remotely. VDB-235150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Vulners

Node

bugfindericogenieMatch1.0

VendorProductVersionCPE
bugfindericogenie1.0cpe:2.3:a:bugfinder:icogenie:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bugfinder	icogenie	1.0	cpe:2.3:a:bugfinder:icogenie:1.0:::::::*

CNA Affected

[
  {
    "vendor": "Bug Finder",
    "product": "ICOGenie",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Support Ticket Handler"
    ]
  }
]

References

vuldb.com/?ctiid.235150

vuldb.com/?id.235150

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.0%

JSON

Related for CVE-2023-3829