exploitDog

CVE-2023-51843

Опубликовано: 30 янв. 2024

Источник: nvd

CVSS3: 8.2

EPSS Низкий

Описание

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.

Ссылки

https://github.com/flatlogic/react-dashboard
Product
https://github.com/flatlogic/react-dashboard/issues/65
Issue Tracking
https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51843.md
Third Party Advisory
https://github.com/flatlogic/react-dashboard
Product
https://github.com/flatlogic/react-dashboard/issues/65
Issue Tracking
https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51843.md
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:flatlogic:react_dashboard:1.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00102

Низкий

8.2 High

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-w5f2-rh5m-26w2

CVSS3: 8.2

github

около 2 лет назад

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.

EPSS

Процентиль: 28%

0.00102

Низкий

8.2 High

CVSS3

Дефекты

CWE-79

CWE-79