CVE-2023-53938

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-53938
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53938.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53938
Published
2025-12-18T19:53:34.159Z
Modified
2026-07-15T01:49:07.835720213Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
RockMongo 1.1.7 Stored Cross-Site Scripting Vulnerability via Multiple Parameters
Details

RockMongo 1.1.7 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple unencoded input parameters. Attackers can exploit the vulnerability by submitting crafted payloads in database, collection, and login parameters to execute arbitrary JavaScript in victim's browser.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53938.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/iwind/rockmongo

Affected ranges

Type
GIT
Repo
https://github.com/iwind/rockmongo
Events
Introduced
7d3606d852db7d11fda58e441f366f35370b5ec9
Last affected
7d3606d852db7d11fda58e441f366f35370b5ec9
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:rockmongo:rockmongo:1.1.7:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "1.1.7"
        },
        {
            "last_affected": "1.1.7"
        }
    ]
}

Affected versions

1.*
1.1.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53938.json"