PT-2023-20189 · Unknown · Newbinggogo

Jja8 · Publicado 2023-05-06 · Atualizado 2024-05-17 · CVE-2023-2560

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions jja8 NewBingGoGo versions up to 2023.5.5.2

Description A problem was found in the software, affecting some unknown processing, which leads to cross site scripting when manipulated. The attack can be initiated remotely.

Recommendations For versions up to 2023.5.5.2, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-2560

Produtos afetados

Newbinggogo

Referências · 6

• 🔥 https://gitee.com/jja8/NewBingGoGo/issues/I6WH2E · Exploit
• https://vuldb.com/?id.228167 · Nota
• https://t.me/cvenotify/49917 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2560 · Nota de Segurança
• https://vuldb.com/?ctiid.228167 · Nota
• https://osv.dev/vulnerability/CVE-2023-2560 · Aviso do Fabricante