Lucene search
HistoryJul 14, 2023 - 6:15 p.m.
CVE-2023-37223
cve-2023-37223
cross site scripting
archer platform
remote authenticated attacker
arbitrary code
malicious script
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
38.6%
Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.
Affected configurations
Node
archerirmarcherRange<6.13.0
Related
cve
cve
CVE-2023-37223
2023-07-14 18:15:10
cvelist
cvelist
CVE-2023-37223
2023-07-14 00:00:00
prion
prion
Cross site scripting
2023-07-14 18:15:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
38.6%
Related for NVD:CVE-2023-37223