CVE-2023-1573

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1573
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1573.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1573
Published
2023-03-22T15:31:05.188Z
Modified
2026-07-15T01:49:11.366473530Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
DataGear Graph Dataset cross site scripting
Details

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to this vulnerability.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1573.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

Git / github.com/datageartech/datagear

Affected ranges

Type
GIT
Repo
https://github.com/datageartech/datagear
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0d316dd80a7c9366c3707a847dacb8b9632b1c18
Database specific 
{
    "cpe": "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.1"
        }
    ]
}

Affected versions

1.*
1.11.0
1.11.1
v1.*
v1.1.0
v1.1.1
v1.10.0
v1.11.0
v1.11.1
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.6.1
v1.7.0
v1.8.0
v1.8.1
v1.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1573.json"