exploitDog

CVE-2023-43971

Опубликовано: 17 июл. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.

Ссылки

https://gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b
Third Party Advisory
https://github.com/lizhipay/acg-faka/issues/72
Exploit
Issue Tracking
Third Party Advisory
https://gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b
Third Party Advisory
https://github.com/lizhipay/acg-faka/issues/72
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lizhipay:acg-faka:1.1.7:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00389

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-wx53-7r2h-f7w6

CVSS3: 6.1

github

больше 1 года назад

Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.

EPSS

Процентиль: 59%

0.00389

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79