CVE-2023-4492

MEDIO 6.1CVE-2023-4492 · Published 04/10/2023 · updated 17/06/2026

In breve

CVE-2023-4492 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda easy address book web server (easy address book web server project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.42%, superiore al 36.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
easy address book web server easy_address_book_web_server_project	`= 1.6`	No fix yet

Description

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products · Third Party Advisory

Altre vulnerabilità di easy address book web server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free