Cross Site Scripting Vulnerability in Kodbox <= 1.37
CVE-2023-29791

6.1MEDIUM

Key Information:

Vendor

Kodcloud

Status
Kodbox
Vendor
CVE Published:
11 May 2023

What is CVE-2023-29791?

Kodbox versions up to 1.37 are susceptible to a Cross Site Scripting (XSS) vulnerability that can be exploited through the application's debug information. An attacker can inject malicious scripts that execute in the context of the user's session, potentially compromising sensitive data and leading to unauthorized actions on behalf of the user. It's crucial for users of affected versions to apply necessary patches and adopt security best practices to mitigate the risks associated with this vulnerability.

References

https://blog.mo60.cn/index.php/archives/kodbox-xss.html

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.