PT-2023-27649 · Opencrx · Opencrx

CVE-2023-40812 · Publicado 2023-11-18 · Atualizado 2023-11-22

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenCRX version 5.2.0

Description The issue allows for HTML injection via the Accounts Group Name Field.

Recommendations For OpenCRX version 5.2.0, update to a version that fixes this issue, or as a temporary workaround, consider validating and sanitizing user input in the Accounts Group Name Field to prevent HTML injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-40812

GHSA-3G79-J8HQ-R4XV

Produtos afetados

Opencrx

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40812.json · Exploit
• 🔥 https://esecforte.com/cve-2023-40812-html-injection-accounts-group · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-40812 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-3g79-j8hq-r4xv · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-40812 · Aviso do Fabricante