CVE Catalog
CVE-2023-38971
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.59%
43th percentile - higher than 43% of all known CVEs
Summary
Badaso versions 0.0.1 through 2.9.7 have a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.
Risk Assessment
This vulnerability could lead to an attacker gaining control over the application, posing a serious threat to user data security.
Recommendation
It is recommended to update Badaso to the latest version to mitigate this vulnerability and conduct a security audit of the application.
Original NVD description (English source)
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.