Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2023-43875
HistoryOct 19, 2023 - 10:15 p.m.

CVE-2023-43875

2023-10-1922:15:09
Google
osv.dev
7
cross-site scripting
subrion cms
arbitrary web scripts
crafted payload
installation vulnerabilities

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.3%

JSON

Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.

Related

prion 1
cvelist 1
osv 1
github 1
veracode 1
vulnrichment 1
cve 1
nvd 1
prion
prion
Cross site scripting
2023-10-19 22:15:00
cvelist
cvelist
CVE-2023-43875
2023-10-19 00:00:00
osv
osv
Subrion CMS vulnerable to Cross-site Scripting
2023-10-20 00:30:24
github
github
Subrion CMS vulnerable to Cross-site Scripting
2023-10-20 00:30:24
veracode
veracode
Cross Site Scripting (XSS)
2023-10-25 12:00:47
vulnrichment
vulnrichment
CVE-2023-43875
2023-10-19 00:00:00
cve
cve
CVE-2023-43875
2023-10-19 22:15:09
nvd
nvd
CVE-2023-43875
2023-10-19 22:15:09

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.3%

JSON
Related for OSV:CVE-2023-43875
prion1cvelist1osv1github1veracode1vulnrichment1cve1nvd1