CVE-2023-7076

MEDIO 6.1CVE-2023-7076 · Published 22/12/2023 · updated 17/06/2026

En resumen

CVE-2023-7076 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a myaac (my-aac).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.47%, mayor que el 40.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
myaac my-aac	`≤ 0.8.13`	No fix yet

Description

A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug[2]['subject']/bug[2]['text']/report['subject'] leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.14 is able to address this issue. The name of the patch is 83a91ec540072d319dd338abff45f8d5ebf48190. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248848.

References

otsoft/myaac commit 83a91ec · Patch
slawkens/myaac release v0.8.14 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free