CVE-2023-34796

MediumCVSS 6.1

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

45th percentile - higher than 45% of all known CVEs

Summary

In versions 1.1 and through commit 8a1d882b4c481a05e296e9b38a7961e912146a0f of the dmarcts-report-viewer dashboard, there is a cross site scripting (XSS) vulnerability. It allows unauthenticated attackers to execute arbitrary code via the org_name or domain values.

Risk Assessment

This vulnerability could lead to the execution of malicious code in the user's browser context, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update to the latest version of the dmarcts-report-viewer dashboard to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the org_name or domain values.