CVE-2023-4517

Source
https://cve.org/CVERecord?id=CVE-2023-4517
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4517.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-4517
Published
2023-10-13T12:24:14.214Z
Modified
2025-12-05T00:08:26.335561Z
Severity
  • 3.2 (Low) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp
Details

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

Database specific
{
    "cna_assigner": "@huntrdev",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4517.json",
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

Git / github.com/hestiacp/hestiacp

Affected ranges

Type
GIT
Repo
https://github.com/hestiacp/hestiacp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

0.*
0.9.8-28
1.*
1.0.1
1.00.0-190618
1.2.0
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.10
1.4.11
1.4.12
1.4.13
1.4.14
1.4.15
1.4.16
1.4.17
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.1
1.5.10
1.5.11
1.5.12
1.5.13
1.5.14
1.5.15
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4517.json"