Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-5555
HistoryOct 12, 2023 - 10:32 a.m.

CVE-2023-5555 Cross-site Scripting (XSS) - Generic in frappe/lms

2023-10-1210:32:05
CWE-79
@huntrdev
www.cve.org
cross-site scripting
generic
github repository
frappe/lms
prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.

CNA Affected

[
  {
    "vendor": "frappe",
    "product": "frappe/lms",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "5614a6203fb7d438be8e2b1e3030e4528d170ec4",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

Related for CVELIST:CVE-2023-5555