CVE-2023-33829

MediumCVSS 5.4

Published: 24/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.26%

94th percentile - higher than 94% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager versions 1.2 to 1.60 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.

Risk Assessment

This vulnerability could lead to user data theft or session hijacking, posing a significant threat to the application's security and the organization's data.

Recommendation

It is recommended to update SCM Manager to the latest version to mitigate this vulnerability and implement appropriate input sanitization filters.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.