CVE-2023-40817
Dashboard / Vulnerabilities / CVE-2023-40817
Summary:
Details: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
References: https://www.esecforte.com/cve-2023-40817-html-injection-product-configuration/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40817.json, https://nvd.nist.gov/vuln/detail/CVE-2023-40817
Affected packages
Package
Name:
Purl:
Affected ranges
Type: GIT
Events:
Introduced- 29f81c08d34353b53850e9a16b587ffd636a687d
Fixed -None
Affected versions
5.2.0
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
