Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-3067
HistoryJun 02, 2023 - 12:00 a.m.

CVE-2023-3067 Cross-site Scripting (XSS) - Stored in zadam/trilium

2023-06-0200:00:00
CWE-79
@huntrdev
www.cve.org
3
cve-2023-3067
cross-site scripting
stored
github
zadam/trilium
repository
prior to 0.59.4

CVSS3

4.6

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

34.5%

Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.

CNA Affected

[
  {
    "vendor": "zadam",
    "product": "zadam/trilium",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.59.4",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.6

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

34.5%

Related for CVELIST:CVE-2023-3067