PT-2023-21027 · Unknown · File Management Project

CVE-2023-27245 · Publicado 2023-03-27 · Atualizado 2023-03-31

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions File Management Project version 1.0.0

Description A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module.

Recommendations For File Management Project version 1.0.0, consider disabling the Edit User module until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to the Name field to minimize the risk of arbitrary script execution.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-27245

Produtos afetados

File Management Project

Referências · 5

• 🔥 https://github.com/flyasolo/File-Management-System · Exploit
• https://t.me/cvenotify/47263 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27245 · Aviso do Fabricante
• https://t.me/cibsecurity/60806 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27245 · Nota de Segurança