CVE-2023-4492
CVSS V2 None
CVSS V3 None
Description
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded
Overview
- CVE ID
- CVE-2023-4492
- Assigner
- INCIBE
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-10-04T12:19:44.181Z
- Last Modified Date
- 2023-10-04T12:19:44.181Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-4492 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4492 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-24 19:23:58 | Added to TrackCVE |