Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp
CVE-2023-4517

5.4MEDIUM

Key Information:

Vendor

hestiacp

Status
hestiacp/hestiacp
Vendor
CVE Published:
13 October 2023

What is CVE-2023-4517?

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

Affected Version(s)

hestiacp/hestiacp < 1.8.6

References

https://huntr.dev/bounties/508d1d21-c45d-47ff-833f-50c671...
https://github.com/hestiacp/hestiacp/commit/d30e3edbca591...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.