CVE-2023-0410mediumCWE-79

CVE-2023-0410: medium-severity vulnerability in builderio/qwik

Cross-site Scripting (XSS) - Generic in builderio/qwik

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.5%
exploitation probability
0.5%top 61% of all CVEs
observed exploitation
nono source reports it
Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
builderio · builderio/qwik
Related CVEs — builderio/qwik

In the same product, most dangerous first.

CVE-2023-1283CRITICAL Code Injection in builderio/qwikEPSS 1.1%CVE-2023-2307MEDIUMCross-Site Request Forgery (CSRF) in builderio/qwikEPSS 0.3%
References
https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151ahttps://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e