5.4
CVE-2023-50639
- EPSS 0.09%
- Veröffentlicht 20.12.2023 21:15:08
- Zuletzt bearbeitet 21.11.2024 08:37:07
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Iscute ≫ Cute Http File Server Version1.0
Iscute ≫ Cute Http File Server Version2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.264 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.4 | 2.3 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.