CVE-2023-6646

MEDIO 5.4CVE-2023-6646 · Published 09/12/2023 · updated 17/06/2026

In breve

CVE-2023-6646 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda linkding (sissbruecker).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 50.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
linkding sissbruecker	`= 1.23.0`	No fix yet

Description

A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.23.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-247338 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product.

References

sissbruecker/linkding release v1.23.1 · Release Notes
treasure-blarney-085.notion.site/linkding-XSS-12709fa5ec664c8ebf6a4a02141252a8 · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free