CVE-2023-47437 - A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack

Published Nov 27, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-51551
Advisory
https://github.com/herombey/CVE-2023-47437
Third Party Advisory
https://github.com/pachno/pachno
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-51551		Advisory
https://github.com/herombey/CVE-2023-47437		Third Party Advisory
https://github.com/pachno/pachno		Product