Reflected Cross-Site Scripting Vulnerability in SHIRASAGI
CVE-2023-36492

6.1MEDIUM

Key Information:

Vendor: Shirasagi Project
Status: Shirasagi
Vendor: CVE Published:; 5 September 2023

🔔 Create Shirasagi Project Vulnerability Alert

What is CVE-2023-36492?

The reflected cross-site scripting vulnerability in SHIRASAGI prior to version 1.18.0 allows an unauthenticated remote attacker to inject and execute arbitrary scripts in the web browser of users logging into the application. This can lead to unauthorized access, data manipulation, and potential compromise of user credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SHIRASAGI prior to v1.18.0

References

https://www.ss-proj.org/support/954.html

https://jvn.jp/en/jp/JVN82758000/

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Sep 5, 2023
Vulnerability Reserved
Aug 9, 2023

JSON

Shirasagi Project