PT-2023-29294 · Unknown · Zenario Cms

Romanhu · Publicado 2023-10-06 · Atualizado 2023-10-06 · CVE-2023-44771

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zenario CMS version 9.4.59197

Description A Cross-Site Scripting (XSS) vulnerability allows a local attacker to execute arbitrary code via a crafted script to the Page Layout.

Recommendations For Zenario CMS version 9.4.59197, consider disabling the Page Layout feature until a patch is available to prevent exploitation of the XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-44771

GHSA-6CXV-27R2-FP3M

Produtos afetados

Zenario Cms

Referências · 8

• 🔥 https://github.com/sromanhu/ZenarioCMS--Stored-XSS---Page-Layout · Exploit
• https://github.com/TribalSystems/Zenario · Nota
• https://twitter.com/CVEnew/status/1710277643617317101 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-6cxv-27r2-fp3m · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1710305994792730632 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-44771 · Nota de Segurança
• https://t.me/cibsecurity/71705 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-44771 · Aviso do Fabricante