Lucene search

MitreCVE-2023-47437

HistoryNov 28, 2023 - 12:15 a.m.

CVE-2023-47437

2023-11-2800:15:07

CWE-79

mitre

web.nvd.nist.gov

cve-2023-47437

vulnerability

pachno 1.0.6

authenticated attacker

xss attack

input validation

nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

14.0%

JSON

A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.

Affected configurations

Nvd

Node

pachnopachnoRange<1.0.6

VendorProductVersionCPE
pachnopachno*cpe:2.3:a:pachno:pachno:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pachno	pachno	*	cpe:2.3:a:pachno:pachno::::::::

References

github.com/herombey/CVE-2023-47437

github.com/pachno/pachno