PT-2023-16144 · Unknown · Ityouknow Favorites-Web

I684L9 · Publicado 2023-01-13 · Atualizado 2024-05-17 · CVE-2023-0287

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ityouknow favorites-web (affected versions not specified)

Description A vulnerability was found in the Comment Handler component of ityouknow favorites-web, which can lead to cross-site scripting. The attack may be launched remotely. The issue has been rated as problematic and the exploit has been disclosed to the public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-0287

Produtos afetados

Ityouknow Favorites-Web

Referências · 8

• 🔥 https://gitee.com/ityouknow/favorites-web/issues/I684L9 · Exploit
• https://t.me/cvenotify/42676 · Publicação no Telegram
• https://t.me/cibsecurity/56481 · Publicação no Telegram
• https://vuldb.com/?ctiid.218294 · Nota
• https://t.me/cvenotify/41923 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0287 · Nota de Segurança
• https://vuldb.com/?id.218294 · Nota
• https://osv.dev/vulnerability/CVE-2023-0287 · Aviso do Fabricante