Cross-site Scripting in OpenCRX

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-40813 · ADVISORY
• opencrx/opencrx · PACKAGE
• esecforte.com/cve-2023-40813-html-injection-saved-search · WEB
• esecforte.com/cve-2023-40813-html-injection-saved-search · Exploit

org.opencrx:opencrx-core-models のその他の脆弱性

• CVE-2023-40817中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
• CVE-2023-40816中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
• CVE-2023-40815中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
• CVE-2023-40814中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
• CVE-2023-40812中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.