CVE-2023-0995: falha de média gravidade em unilogies/bumsys
Cross-site Scripting (XSS) - Stored in unilogies/bumsys
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.5%
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
unilogies · unilogies/bumsysCVEs relacionadas — unilogies/bumsys
No mesmo produto, das mais perigosas para as menos.
CVE-2023-2554HIGHExternal Control of File Name or Path in unilogies/bumsysEPSS 29.1%CVE-2023-0455HIGHUnrestricted Upload of File with Dangerous Type in unilogies/bumsysEPSS 5.9%CVE-2023-2551HIGHPHP Remote File Inclusion in unilogies/bumsysEPSS 1.9%CVE-2023-1362HIGHImproper Restriction of Rendered UI Layers or Frames in unilogies/bumsysEPSS 1.4%CVE-2023-2832HIGH SQL Injection in unilogies/bumsysEPSS 0.9%CVE-2023-1361HIGH SQL Injection in unilogies/bumsysEPSS 0.8%