Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp
CVE-2023-5084

6.1MEDIUM

Key Information:

Vendor: hestiacp
Status: hestiacp/hestiacp
Vendor: CVE Published:; 20 September 2023

🔔 Create hestiacp Vulnerability Alert

What is CVE-2023-5084?

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.

Affected Version(s)

hestiacp/hestiacp < 1.8.8

References

https://huntr.dev/bounties/f3340570-6e59-4c72-a7d1-d4b829...

https://github.com/hestiacp/hestiacp/pull/4013/commits/51...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 20, 2023
Vulnerability Reserved
Sep 20, 2023

CVE-2023-5084 Data

.