PT-2023-16683 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Sk3L10X1Ng · Publicado 2023-02-24 · Atualizado 2024-05-17 · CVE-2023-1006

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Medical Certificate Generator App version 1.0

Description A problem was found in the New Record Handler component. The issue arises from the manipulation of arguments such as Firstname, Middlename, Lastname, Suffix, Nationality, Doctor Fullname, and Doctor Suffix with malicious input, like ">, leading to cross-site scripting. This can be initiated remotely.

Recommendations For version 1.0, consider disabling the New Record Handler component or restricting the input for the affected arguments until a fix is available. Avoid using the arguments Firstname, Middlename, Lastname, Suffix, Nationality, Doctor Fullname, and Doctor Suffix with unvalidated input to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-1006

Produtos afetados

Sourcecodester Medical Certificate Generator App

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-1006 · Aviso do Fabricante
• https://t.me/cibsecurity/58853 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1006 · Nota de Segurança
• https://vuldb.com/?ctiid.221739 · Nota
• https://vuldb.com/?id.221739 · Nota