CVE-2023-0300

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-0300

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0300.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-0300

Published

2023-01-14T00:00:00Z

Modified

2026-08-08T08:45:22.358388Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N CVSS Calculator

Summary

Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io

Details

Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

Database specific

{
    "cna_assigner": "@huntrdev",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0300.json",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / github.com/alfio-event/alf.io

Affected ranges

Type

GIT

Repo

https://github.com/alfio-event/alf.io

Events

Introduced

Fixed

455a32b6f7945afec2b2c66183df7b5821a8ee99

Fixed

c1ae54ac84f1c7a5ec2831876f6445cb79be96fc

Database specific

Show details

{
    "cpe": "cpe:2.3:a:opencollective:alf.io:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0-m4-2301"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.10

1.10-RC1

1.10-RC2

1.10.1

1.11

1.12

1.12-RC1

1.12-RC2

1.12-RC3

1.12-RC4

1.13

1.13-RC1

1.13-RC2

1.13-RC3

1.14

1.14-RC1

1.14-RC2

1.14.1

1.4

1.4-RC2

1.4.1

1.5

1.6

1.7

1.8

1.8-RC1

1.8-RC2

1.9

1.9.1

2.*

2.0-M0

2.0-M1

2.0-M1-1906

2.0-M1-1906.1

2.0-M2

2.0-M3

2.0-M4

2.0-M4-2204

2.0-M4.RC1

2.0-M4.RC2

2.0-M4.RC3

2.0-M4.RC4

alfio-1.*

alfio-1.1

alfio-1.2

alfio-1.3

alfio-1.3-beta1

alfio-1.3.1

v1.*

v1.0-pre-rename

v1.0-pre-rename-v2

Database specific

vanir_signatures_modified

"2026-08-08T08:45:22Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0300.json"

vanir_signatures

[
    {
        "signature_type": "Line",
        "target": {
            "file": "src/main/java/alfio/repository/GroupRepository.java"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "179346724071709104395648546657116123083",
                "41324155217614722031306471399910369119",
                "266830313214498864354356945946328969194",
                "228767986768824810396703521955864588147",
                "303255137359136306365632280891878842258",
                "70989823089381429076000253393596358875",
                "146496161105132861366567088860459900612"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "id": "CVE-2023-0300-53a35c82"
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "src/main/java/alfio/manager/GroupManager.java"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "154994281912690490008657171607173352084",
                "224543024083346277389776274499170872013",
                "336889320167461941672328412248453899153",
                "263024637147292477279562557153611468543",
                "284006795532135807842287203501185961941",
                "57277246519812210944060891952586775989",
                "223436688359973906173567207159137810851",
                "217007599838930405914413045574941009929",
                "136049536390704942488454267699315467949",
                "21165629036102851580009953526902342060",
                "2825002820183518583488499776451080549",
                "96976461998301855216737967937073428837",
                "11450408020225217075938864546960836082",
                "261660337999481829317618942294917149805",
                "309361622035826396278626017660013756465",
                "143753360833428365424987232140309546110"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "id": "CVE-2023-0300-8613ce81"
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "src/test/java/alfio/manager/GroupManagerIntegrationTest.java"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "316244255480784157778265662877718439954",
                "43268436243981222348880993837773609335"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "id": "CVE-2023-0300-a3049f3e"
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/main/java/alfio/manager/GroupManager.java",
            "function": "createNew"
        },
        "deprecated": false,
        "digest": {
            "length": 198.0,
            "function_hash": "42906584254674445402726468078102253416"
        },
        "signature_version": "v1",
        "source": "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "id": "CVE-2023-0300-ea128c7d"
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/main/java/alfio/manager/GroupManager.java",
            "function": "update"
        },
        "deprecated": false,
        "digest": {
            "length": 784.0,
            "function_hash": "184715086470893560273832570104812567791"
        },
        "signature_version": "v1",
        "source": "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "id": "CVE-2023-0300-fdf6472f"
    }
]