CVE-2023-3073
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability was identified in the GitHub repository tsolucio/corebos prior to version 8 via evvtgendoc.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and conduct a security audit of the application.
Other vulnerabilities in tsolucio/corebos
See all- CVE-2023-3069Critical
An unverified password change exists in the GitHub repository tsolucio/corebos prior to version 8, which may lead to unauthorized access.
- CVE-2023-3075Medium
A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.
- CVE-2023-3074Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
- CVE-2023-3071Medium
A Cross-site Scripting (XSS) vulnerability - Stored in the GitHub repository tsolucio/corebos prior to version 8.
- CVE-2023-3070Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS