CVE-2023-3196

Description

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page description parameters within the administration panel.

Reserved 2023-06-12 | Published 2023-10-03 | Updated 2024-10-01 | Assigner INCIBE

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
unaffected

23.04-alpha3
affected

Credits

Pedro José Navas Pérez finder

References

www.incibe.es/.../multiple-vulnerabilities-canopsis-capensis

git.canopsis.net/...-next/src/helpers/html.js?ref_type=heads

git.canopsis.net/...nopsis-next/src/config.js?ref_type=heads

cve.org (CVE-2023-3196)

nvd.nist.gov (CVE-2023-3196)

Download JSON