CVE-2023-32193
Norman API Cross-site Scripting Vulnerability
A vulnerability has been identified in which unauthenticated cross-site
scripting (XSS) in Norman's public API endpoint can be exploited. This
can lead to an attacker exploiting the vulnerability to trigger
JavaScript code and execute commands remotely.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Productos afectados
SUSE · norman¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →