Vulnerability Database
Blog
FAQ
Docs
CVE-2023-1283
See a problem?
Please try reporting it
to the source
first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-1283
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1283.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1283
Aliases
GHSA-9wf9-qvvp-2929
Published
2023-03-08T22:15:09Z
Modified
2025-02-19T03:28:53.362805Z
Severity
9.8 (Critical)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.
References
https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8
https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66
Affected packages
Git
/
github.com/builderio/qwik
Affected ranges
Type
GIT
Repo
https://github.com/builderio/qwik
Events
Introduced
0
Unknown introduced commit / All previous commits are affected
Fixed
4f0812cb585fc5a5c46bf0c7d1d0079c70ff447d
Affected versions
v0.*
v0.0.100
v0.0.101
v0.0.102
v0.0.103
v0.0.104
v0.0.105
v0.0.106
v0.0.107
v0.0.108
v0.0.109
v0.0.11
v0.0.110
v0.0.112
v0.0.113
v0.0.12-0
v0.0.12-pre.1
v0.0.13
v0.0.14
v0.0.14-0
v0.0.14-2
v0.0.14-4
v0.0.15
v0.0.16
v0.0.16-0
v0.0.16-1
v0.0.16-10
v0.0.16-12
v0.0.16-13
v0.0.16-2
v0.0.16-4
v0.0.16-5
v0.0.16-6
v0.0.16-7
v0.0.16-8
v0.0.16-9
v0.0.18
v0.0.18-0
v0.0.18-1
v0.0.18-2
v0.0.18-3
v0.0.18-4
v0.0.18-5
v0.0.18-6
v0.0.18-7
v0.0.19
v0.0.19-0
v0.0.19-1
v0.0.19-2
v0.0.20
v0.0.20-0
v0.0.20-1
v0.0.20-2
v0.0.20-3
v0.0.20-4
v0.0.20-5
v0.0.20-7
v0.0.20-8
v0.0.21
v0.0.21-0
v0.0.22
v0.0.23
v0.0.24
v0.0.25
v0.0.26
v0.0.27
v0.0.28
v0.0.29
v0.0.30
v0.0.31
v0.0.32
v0.0.33
v0.0.34
v0.0.35
v0.0.36
v0.0.37
v0.0.38
v0.0.39
v0.0.40
v0.0.41
v0.0.42
v0.10.0
v0.11.0
v0.11.1
v0.12.0
v0.12.1
v0.13.0
v0.13.1
v0.13.2
v0.13.3
v0.14.0
v0.14.1
v0.15.0
v0.15.1
v0.15.2
v0.16.0
v0.16.1
v0.16.2
v0.17.0
v0.17.1
v0.17.2
v0.17.3
v0.17.4
v0.17.5
v0.18.0
v0.18.1
v0.19.0
v0.19.1
v0.19.2
v0.20.0
v0.20.1
v0.9.0
CVE-2023-1283 - OSV