PT-2023-22644 · Unknown · Neox Contact Center

Huzefa2212 · Publicado 2023-06-22 · Atualizado 2023-06-29 · CVE-2023-30347

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Neox Contact Center version 2.3.9

Description A Cross Site Scripting (XSS) issue exists, allowing exploitation via the serach sms api name parameter to the SMA API search.

Recommendations For Neox Contact Center version 2.3.9, avoid using the serach sms api name parameter in the SMA API search until the issue is resolved. As a temporary workaround, consider restricting access to the SMA API to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-30347

Produtos afetados

Neox Contact Center

Referências · 4

• 🔥 https://github.com/huzefa2212/CVE-2023-30347/blob/main/poc.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-30347 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-30347 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/8535 · Publicação no Telegram