CVE-2023-5024

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-5024
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5024.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-5024
Published
2023-09-17T06:31:04.839Z
Modified
2026-08-12T03:51:26.314788531Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Planno Comment cross site scripting
Details

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239865 was assigned to this vulnerability.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "23.04.04"
                },
                {
                    "last_affected": "23.04.04"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5024.json"
}
References

Affected packages

Git / github.com/planningbiblio/planningbiblio

Affected ranges

Type
GIT
Repo
https://github.com/planningbiblio/planningbiblio
Events
Introduced
8de05926d5bb889b940cd53b7f7c226faa6fe12a
Last affected
8de05926d5bb889b940cd53b7f7c226faa6fe12a
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "23.04.04"
        },
        {
            "last_affected": "23.04.04"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:planno:planning_biblio:23.04.04:*:*:*:*:*:*:*"
}

Affected versions

23.*
23.04.04
v23.*
v23.04.04

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5024.json"