PT-2025-1456 · Pat Infinite Solutions · Helpdeskadvanced

Published 2025-01-13 · Updated 2025-01-14 · CVE-2023-42230

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pat Infinite Solutions HelpdeskAdvanced versions <= 11.0.33

Description The issue is related to Cross Site Scripting (XSS) via the WSCView/Save function. This allows for potential malicious script execution. No information is provided about the estimated number of affected devices or real-world incidents.

Recommendations For versions <= 11.0.33, update to a version that fixes the Cross Site Scripting vulnerability via the WSCView/Save function. As a temporary workaround, consider disabling the WSCView/Save function until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-42230

Affected Products

Helpdeskadvanced

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-42230 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42230 · Vendor Advisory
• https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md · Note
• https://twitter.com/CVEnew/status/1878932394616541251 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1879003603488079926 · Twitter Post