exploitDog

CVE-2023-37798

Опубликовано: 07 сент. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the project title parameter.

Ссылки

http://redcap.com
Product
http://vanderbilt.com
Product
https://www.cyderes.com/blog/cve-2023-37798-stored-cross-site-scripting-in-vanderbilt-redcap/
Exploit
Third Party Advisory
http://redcap.com
Product
http://vanderbilt.com
Product
https://www.cyderes.com/blog/cve-2023-37798-stored-cross-site-scripting-in-vanderbilt-redcap/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*

Версия до 13.1.35 (включая)

EPSS

Процентиль: 24%

0.00083

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-wcmm-q82m-r4m7

CVSS3: 5.4

github

больше 2 лет назад

A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the project title parameter.

EPSS

Процентиль: 24%

0.00083

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79