Lucene search
PRIOn knowledge basePRION:CVE-2023-42479HistoryDec 12, 2023 - 1:15 a.m.
Cross site scripting
2023-12-1201:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
unauthenticated attacker
hidden url
frame
biller direct system
disclosure
modification
An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| biller_direct | eq | 750 | |
| biller_direct | eq | 635 |
Related
cve
cve
CVE-2023-42479
2023-12-12 01:15:10
cnvd
cnvd
SAP Biller Direct Cross-Site Scripting Vulnerability
2023-12-14 00:00:00
nvd
nvd
CVE-2023-42479
2023-12-12 01:15:10
cvelist
cvelist
CVE-2023-42479 Cross-Site Scripting (XSS) vulnerability in SAP Biller Direct
2023-12-12 00:59:36