PT-2023-27654 · Opencrx · Opencrx

CVE-2023-40817

·

Publicado

2023-11-18

·

Atualizado

2023-11-22

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions OpenCRX version 5.2.0
Description The issue allows for HTML injection via the Product Configuration Name Field.
Recommendations For OpenCRX version 5.2.0, update to a version that fixes this issue, if available. As a temporary workaround, consider restricting user input in the Product Configuration Name Field to prevent HTML injection until a patch is available.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-40817
GHSA-96Q4-7FWR-GMXH

Produtos afetados

Opencrx