DataGear Graph Dataset cross site scripting
CVE-2023-1573

6.1MEDIUM

Key Information:

Vendor

Datagear

Status
DataGear
Vendor
CVE Published:
22 March 2023

What is CVE-2023-1573?

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to this vulnerability.

Affected Version(s)

DataGear 1.11.0

DataGear 1.11.1

References

https://vuldb.com/?id.223565
vdb-entrytechnical-description
https://vuldb.com/?ctiid.223565
signaturepermissions-required
https://github.com/yangyanglo/ForCVE/blob/main/2023-0x04.md
broken-linkexploit

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yangyanglo (VulDB User)
.