PT-2023-22439 · Unknown+1 · Hoteldruid+1

Jichngan · Publicado 2023-05-03 · Atualizado 2025-01-30 · CVE-2023-29839

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hotel Druid version 3.0.4

Description A Stored Cross Site Scripting (XSS) issue exists in multiple pages, allowing arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function.

Recommendations For Hotel Druid version 3.0.4, consider disabling the Document function or restricting input for the Surname, Name, and Nickname fields until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-29839

Produtos afetados

Debian

Hoteldruid

Referências · 10

• 🔥 https://github.com/jichngan/CVE-2023-29839 · Exploit
• https://osv.dev/vulnerability/CVE-2023-29839 · Aviso do Fabricante
• https://t.me/cvenotify/109242 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-29839 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-29839 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-29839 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-29839 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-29839 · Aviso do Fabricante
• https://t.me/cibsecurity/63195 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-29839 · Aviso do Fabricante