CVE-2023-51790

Опубликовано: 12 янв. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component.

Ссылки

https://github.com/Piwigo/AdminTools/issues/21
Exploit
Issue Tracking
Vendor Advisory
https://github.com/Piwigo/Piwigo/issues/2069
Exploit
Issue Tracking
Vendor Advisory
https://github.com/Piwigo/AdminTools/issues/21
Exploit
Issue Tracking
Vendor Advisory
https://github.com/Piwigo/Piwigo/issues/2069
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:piwigo:piwigo:14.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.0033

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-51790

CVSS3: 6.1

debian

около 2 лет назад

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote ...

GHSA-37m4-w5jp-r3px

CVSS3: 6.1

github

около 2 лет назад

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component.

EPSS

Процентиль: 55%

0.0033

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79