CVE-2023-32193

Summary

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely.

Affected Software

Weaknesses

• CWE-80: CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32193
• https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6

• ←Previous
• Next→