PT-2023-30339 · Unknown+1 · Hoteldruid+1

Tomoro Taniguchi · Publicado 2023-11-10 · Atualizado 2023-11-16 · CVE-2023-47164

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HOTELDRUID versions 3.0.5 and earlier

Description A cross-site scripting issue allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product. This enables the attacker to perform actions as the victim user.

Recommendations For HOTELDRUID versions 3.0.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-47164

Produtos afetados

Debian

Hoteldruid

Referências · 12

• https://ubuntu.com/security/CVE-2023-47164 · Aviso do Fabricante
• https://hoteldruid.com/en/download.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-47164 · Nota de Segurança
• https://jvn.jp/en/jp/JVN99177549 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-47164 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-47164 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-47164 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1722944284184211645 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-47164 · Aviso do Fabricante
• https://hoteldruid.com · Nota
• https://osv.dev/vulnerability/CVE-2023-47164 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1722905930118140380 · Publicação no Twitter