PT-2023-25311

CVE-2023-35783

Publicado

2023-06-16

Atualizado

2023-06-26

Descrição por

CVSS 3.1

6.3

Média

MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ke search extension versions prior to 4.0.3 ke search extension versions 4.1.x through 4.6.x before 4.6.6 ke search extension versions 5.x before 5.0.2

Description The issue allows XSS via indexed data.

Recommendations For ke search extension versions prior to 4.0.3, update to version 4.0.3 or later. For ke search extension versions 4.1.x through 4.6.x, update to version 4.6.6 or later. For ke search extension versions 5.x, update to version 5.0.2 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Torben Hansen

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Identificadores relacionados

CVE-2023-35783