TOTVS RM Portal cross site scripting
CVE-2023-4710

6.1MEDIUM

Key Information:

Vendor

TOTVS

Status
RM
Vendor
CVE Published:
1 September 2023

What is CVE-2023-4710?

A vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-238573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Version(s)

RM 12.1

References

https://vuldb.com/?id.238573
vdb-entrytechnical-description
https://vuldb.com/?ctiid.238573
signature

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

chor4o (VulDB User)
.