Uniform Server Zero XSS Vulnerability

CVE-2023-5052

6.3MEDIUM

Key Information

Vendor: Uniform Server Zero
Status: Uniform Server Zero
Vendor: CVE Published:; 14 May 2024

Summary

vulnerability in Uniform Server Zero, version 10.2.5, consisting of an XSS through the /us_extra/phpinfo.php page. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and partially take over their session details.

Affected Version(s)

Uniform Server Zero = 10.2.5

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
May 14, 2024
Vulnerability Reserved.
Sep 18, 2023

Collectors

NVD DatabaseMitre Database

Credit

Rafael Pedrero