CVE-2023-43875

Опубликовано: 19 окт. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.

Ссылки

https://github.com/sromanhu/CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.026

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-646r-8fcc-p82r