CVE-2023-0577mediumCWE-79

CVE-2023-0577: medium-severity vulnerability in ASOS Information Technologies SOBIAD

Multiple XSS in ASOS Information Technologies' Sobiad

Published 03 Mar 2023 · Updated 01 Jun 2026

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.4%

exploitation probability

0.4%top 70% of all CVEs

observed exploitation

nono source reports it

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting (XSS). This issue affects SOBIAD: before 23.02.01.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

ASOS Information Technologies · SOBIAD

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0125 https://www.usom.gov.tr/bildirim/tr-23-0125