MEDIUM
Cross-site Scripting (XSS) - Stored in spinacms/spina
Published Jun 28, 2023
4.8
MEDIUMCVSS 3.1
EPSS 0.56%
Description
Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<2.15.1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Spinacms | Spinacms/spina | n/a |
|
-
- Version 0StatusaffectedConstraints<2.15.1
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1760 Advisory
- https://github.com/advisories/GHSA-97wh-6hmj-g8j9 Advisory
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spina/CVE-2023-3445.yml
- https://github.com/spinacms/spina/commit/9adfe7b4807b3cc10dbb7351a26cc32f5d8c14a3 Patch
- https://huntr.dev/bounties/18a74a9d-4a2d-4bf8-ae62-56a909427070 ExploitThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3445
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner @huntrdev
Published Jun 28, 2023
Updated Nov 6, 2024
Reserved Jun 28, 2023
Link CVE-2023-3445
CISA Vulnrichment
Updated Nov 6, 2024
ENISA EUVD
EUVD-2023-1760 GHSA-97WH-6HMJ-G8J9 Assigner @huntrdev
Published Jun 28, 2023
Updated Nov 6, 2024
Exploited since n/a
Link EUVD-2023-1760