Lucene search
Veracode Vulnerability DatabaseVERACODE:45525HistoryFeb 19, 2024 - 11:57 a.m.
Cross Site Scripting (XSS)
2024-02-1911:57:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross site scripting
input validation
login page
javascript code
security vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
17.0%
@scrypted/core and @scrypted/server are vulnerable to Cross Site Scripting. The vulnerability is due to insufficient input validation on the login page, allowing attackers to execute arbitrary JavaScript code after the login process.
Related
cvelist
cvelist
CVE-2023-47623 Scrypted reflected Cross-site Scripting vulnerability
2023-12-13 21:38:14
prion
prion
Cross site scripting
2023-12-13 22:15:00
Open redirect
2024-02-17 22:15:00
osv
osv
Scrypted Cross-site Scripting vulnerability
2024-08-05 21:29:22
github
github
Scrypted Cross-site Scripting vulnerability
2024-08-05 21:29:22
nvd
nvd
CVE-2023-47623
2023-12-13 22:15:43
CVE-2024-25113
2024-02-17 22:15:46
cve
cve
CVE-2023-47623
2023-12-13 22:15:43
CVE-2024-25113
2024-02-17 22:15:46
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
17.0%
Related for VERACODE:45525