CVE-2023-0357

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-0357

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0357.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-0357

Published

2023-04-04T00:00:00Z

Modified

2026-07-15T01:49:07.751686182Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket.

Database specific

{
    "cna_assigner": "Fluid Attacks",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0357.json"
}

References

Affected packages

Git / github.com/helpyio/helpy

Affected ranges

Type

GIT

Repo

https://github.com/helpyio/helpy

Events

Introduced

c7a58bd5a1bfcf72e29d8308041879148ed200ae

Last affected

c7a58bd5a1bfcf72e29d8308041879148ed200ae

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "cpe": "cpe:2.3:a:helpy.io:helpy:2.8.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.8.0"
        },
        {
            "last_affected": "2.8.0"
        }
    ]
}

Affected versions

2.*

2.8.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0357.json"