exploitDog

CVE-2023-43341

Опубликовано: 19 окт. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

Ссылки

https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection-
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection-
Exploit
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:evo:evolution_cms:3.2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00319

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-5h47-9rm5-fx3f

CVSS3: 6.1

github

больше 2 лет назад

Evolution CMS Cross-site Scripting vulnerability

EPSS

Процентиль: 55%

0.00319

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79