Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40073
HistoryDec 04, 2023 - 11:15 p.m.

Cross site scripting

2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
notification.java
visituris
local information disclosure
confused deputy
user interaction
nvd

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-40073