CVE Catalog
CVE-2023-36163
MediumCVSS 6.1Exploitation Probability (EPSS)
High risk2.94%
85th percentile - higher than 85% of all known CVEs
Summary
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.
Risk Assessment
An attacker can exploit this vulnerability to gain control over the application, potentially leading to data theft or malicious actions on behalf of users.
Recommendation
It is recommended to update to the latest version of BuildaGate and implement input validation and filtering in the application.
Original NVD description (English source)
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.