CVE-2023-37657

MediumCVSS 5.4

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

TwoNav version 2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the user's browser context.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft or session hijacking. Organizations should be aware of the security risks associated with web applications.

Recommendation

It is recommended to update to the latest version of TwoNav to mitigate this vulnerability. Additionally, implementing XSS protection mechanisms is advisable.

Original NVD description (English source)

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).