Lucene search
HistoryMar 05, 2023 - 10:15 p.m.
CVE-2023-27641
vulnerability
listserv
xss
crafted url
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.7%
The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL.
Affected configurations
Node
lsoftlistservRange<17.0
Related
cvelist
cvelist
CVE-2023-27641
2023-03-05 00:00:00
prion
prion
Cross site scripting
2023-03-05 22:15:00
cve
cve
CVE-2023-27641
2023-03-05 22:15:08
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.7%
Related for NVD:CVE-2023-27641