CVE-2023-32193 in Normal

Riassunto

di MITRE • 16/10/2024

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 04/05/2023
• Divulgazione: 16/10/2024
• Moderazione: accettato
• Voce: VDB-253238
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00428
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-32193
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-32193
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-32193/