exploitDog

CVE-2023-23011

Опубликовано: 07 фев. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

Ссылки

https://gist.github.com/enferas/e4ab1aedd9727c3b09c7d0154a052199
Exploit
Third Party Advisory
https://gist.github.com/enferas/e8fff9261526fdf51808c39b3004e1b5
Exploit
Third Party Advisory
https://gist.github.com/enferas/e4ab1aedd9727c3b09c7d0154a052199
Exploit
Third Party Advisory
https://gist.github.com/enferas/e8fff9261526fdf51808c39b3004e1b5
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:-:*:*:*:*:*:*

cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta:*:*:*:*:*:*

cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta1:*:*:*:*:*:*

cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta3:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00124

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-f79p-fhg6-6wgx

CVSS3: 6.1

github

около 3 лет назад

Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

EPSS

Процентиль: 32%

0.00124

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79