exploitDog

CVE-2023-3937

Опубликовано: 11 авг. 2023

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

Ссылки

https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC
Issue Tracking
Vendor Advisory
https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:snowsoftware:snow_license_manager:*:*:*:*:service_provider:*:*:*

Версия от 9.0.0 (включая) до 9.30.1 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00186

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-29h4-7v22-wvxg

CVSS3: 4.8

github

больше 2 лет назад

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

EPSS

Процентиль: 40%

0.00186

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

CWE-79