CVE-2023-23927 in Craft정보

요약

\~에 의해 MITRE • 2023. 03. 04.

Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

GitHub, Inc.

예약하다

2023. 01. 19.

공개

2023. 03. 04.

모더레이션

수락

항목

VDB-222310

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

5.4 (NVD)

EPSS

0.00801

KEV

아니요

활동

매우 낮음

부문

Lawfirm, Agriculture, ...

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-23927
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-23927
CVE Details	https://www.cvedetails.com/cve/CVE-2023-23927/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!