PT-2023-27297 · Softwarex · Softwarex

Aarón Flecha Menéndez · Published 2023-10-19 · Updated 2023-10-25 · CVE-2023-40153

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SoftwareX (affected versions not specified)

Description The issue is related to a cross-site scripting vulnerability, which could allow an attacker to access the web application and introduce arbitrary JavaScript by injecting an XSS payload into the hostname parameter of the vulnerable software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-40153

Affected Products

Softwarex

References · 7

• https://osv.dev/vulnerability/CVE-2023-40153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40153 · Security Note
• https://t.me/cibsecurity/72595 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-271-02 · Note
• https://twitter.com/VulmonFeeds/status/1715106104567320863 · Twitter Post
• https://t.me/cvenotify/59945 · Telegram Post
• https://twitter.com/CVEnew/status/1715070296963621258 · Twitter Post