CVE-2023-3034 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Assigner	NCSC.ch
Reserved	2023-06-01
Published	2023-06-28
Updated	2024-11-06

Description

Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44

MEDIUM: 4.7

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Product status

Default status

unaffected

<=2.0.44

affected

Credits

Muhammad Ashhab Khan, u-blox Red Team finder

u-blox AG sponsor

References

https://igs.bkg.bund.de/ntrip/bkgcaster product

https://igs.bkg.bund.de/root_ftp/NTRIP/software/NTRIPCASTER_CHANGELOG vendor-advisory issue-tracking

cve.org CVE-2023-3034

nvd.nist.gov CVE-2023-3034

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.