Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
CVE-2023-2109

6.1MEDIUM

Key Information:

Vendor: Chatwoot
Status: Chatwoot/chatwoot
Vendor: CVE Published:; 17 April 2023

🔔 Create Chatwoot Vulnerability Alert

What is CVE-2023-2109?

Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

chatwoot/chatwoot < 2.14.0

References

https://huntr.dev/bounties/fd5999fd-b1fd-44b4-ae2e-8f95b5...

https://github.com/chatwoot/chatwoot/commit/a06a5a574ad90...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Apr 17, 2023
Vulnerability Reserved
Apr 17, 2023

JSON

Chatwoot