CVE-2023-3726

CVSS V2 None CVSS V3 None
Description
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
Overview
  • CVE ID
  • CVE-2023-3726
  • Assigner
  • Fluid Attacks
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-01-04T14:39:43.942Z
  • Last Modified Date
  • 2024-01-04T14:39:43.942Z
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
References
Reference URL Reference Tags
https://fluidattacks.com/advisories/creed/ third-party-advisory
https://ocsinventory-ng.org/ product
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3726
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3726
History
Created Old Value New Value Data Type Notes
2024-06-24 20:43:50 Added to TrackCVE