6.1
CVE-2023-0643
- EPSS 0.58%
- Veröffentlicht 02.02.2023 12:15:09
- Zuletzt bearbeitet 21.11.2024 07:37:32
- Quelle security@huntr.dev
- CVE-Watchlists
- Unerledigt
LoginImproper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Squidex.Io ≫ Squidex Version < 7.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.58% | 0.431 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 2.8 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| security@huntr.dev | 5.4 | 2.8 | 2.5 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
|
CWE-167 Improper Handling of Additional Special Element
The product receives input from an upstream component, but it does not handle or incorrectly handles when an additional unexpected special element is provided.
https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db
https://huntr.dev/bounties/ea90f8b9-d8fe-4432-9a52-4d663400c52f