CVE-2023-45227

Опубликовано: 06 фев. 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.

Ссылки

https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
Third Party Advisory
US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:westermo:l206-f2g_firmware:4.24:*:*:*:*:*:*:*

cpe:2.3:h:westermo:l206-f2g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00097

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-553x-x9jq-656c

CVSS3: 5.4

github

около 2 лет назад

An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.

EPSS

Процентиль: 28%

0.00097

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79