Lucene search
Veracode Vulnerability DatabaseVERACODE:41445HistoryJul 21, 2023 - 11:13 a.m.
Cross-site Scripting (XSS)
2023-07-2111:13:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
xss vulnerability html sanitization
6.1 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.9%
matrix-react-sdk is vulnerable to Cross-Site Scripting. The vulnerability is due to a lack of HTML sanitization in the export chat feature, which results in Cross-Site Scripting.
| CPE | Name | Operator | Version |
|---|---|---|---|
| matrix-react-sdk | le | 3.76.0-rc.2 | |
| matrix-react-sdk | le | 3.76.0-rc.2 |
Related
osv
osv
matrix-react-sdk vulnerable to XSS in Export Chat feature
2023-07-18 16:58:01
CVE-2023-37259
2023-07-18 17:15:11
cve
cve
CVE-2023-37259
2023-07-18 17:15:11
nvd
nvd
CVE-2023-37259
2023-07-18 17:15:11
freebsd
freebsd
element-web -- Cross site scripting in Export Chat feature
2023-07-18 00:00:00
prion
prion
Cross site scripting
2023-07-18 17:15:00
nessus
nessus
github
github
matrix-react-sdk vulnerable to XSS in Export Chat feature
2023-07-18 16:58:01
cvelist
cvelist
CVE-2023-37259 Cross site scripting in Export Chat feature
2023-07-18 16:59:21
6.1 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.9%
Related for VERACODE:41445