CVE-2023-33229

Опубликовано: 26 июл. 2023

Источник: nvd

CVSS3: 3.5

EPSS Низкий

Описание

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.

Ссылки

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33229
Vendor Advisory
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33229
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*

Версия до 2023.3.0 (исключая)

EPSS

Процентиль: 74%

0.00797

Низкий

3.5 Low

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-m7pr-fh39-xc2c

CVSS3: 3.1

github

больше 2 лет назад