Cross-Site Scripting Vulnerability in KodExplorer by Koding
CVE-2023-37153

6.1MEDIUM

Key Information:

Vendor

Kodcloud

Status
Kodexplorer
Vendor
CVE Published:
10 July 2023

What is CVE-2023-37153?

KodExplorer version 4.51 is susceptible to a Cross-Site Scripting (XSS) vulnerability within the Description box of the Light App creation feature. This vulnerability allows attackers to exploit the system by injecting malicious XSS syntax into the Description field. Consequently, these malicious scripts may execute in the context of users accessing the application, potentially leading to unauthorized actions or data theft. It is essential for users of KodExplorer to address this vulnerability to maintain the integrity and security of their web applications.

References

https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/bl...
https://github.com/kalcaddle/KodExplorer
https://www.chtsecurity.com/news/55f0a781-f7bf-4b2f-b2cc-...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.