PT-2023-32408 · Pkp · Pkp-Lib

CVE-2023-5901

Publicado

2023-10-31

Atualizado

2024-01-21

CVSS v3.1

3.5

Baixa

Vetor

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions pkp/pkp-lib versions prior to 3.3.0-16

Description The issue concerns an Unrestricted Upload of File with Dangerous Type and Cross-site Scripting.

Recommendations For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-5901

Pkp-Lib