PT-2023-20022
CVE-2023-25309
·
Publicado
2023-05-11
·
Atualizado
2026-07-04
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Fetlife rollout-ui version 0.5
Description
The issue allows attackers to execute arbitrary code via a crafted URL to the delete a feature functionality. This is a Cross Site Scripting (XSS) vulnerability.
Recommendations
For Fetlife rollout-ui version 0.5, consider disabling the delete a feature functionality until a patch is available. Restrict access to the crafted URL to minimize the risk of exploitation. Avoid using the delete a feature functionality in the affected version until the issue is resolved.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾