CVE-2023-4564

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-4564
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4564.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-4564
Published
2023-10-03T16:15:10Z
Modified
2024-09-03T04:34:55.108578Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel.

References

Affected packages

Git / github.com/capensis/canopsis

Affected ranges

Type
GIT
Repo
https://github.com/capensis/canopsis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

22.*

22.10-rc1
22.10-rc10
22.10-rc11
22.10-rc12
22.10-rc2
22.10-rc3
22.10-rc4
22.10-rc5
22.10-rc6
22.10-rc7
22.10-rc8
22.10-rc9
22.10.0
22.10.1

23.*

23.04-alpha1
23.04-alpha2
23.04-alpha3

4.*

4.2.94
4.2.95
4.2.96
4.2.97
4.2.991
4.3.91
4.3.92
4.3.93
4.3.94
4.3.95
4.3.96
4.3.97
4.3.98
4.4.91
4.5.91
4.5.92
4.5.93
4.5.94