CVE-2023-2521 Vulnerability Details
/
/
/
CVE-2023-2521 Metadata Quick Info
CVE Published: 04/05/2023 |
CVE Updated: 02/08/2024 |
CVE Year: 2023
Source: VulDB |
Vendor: NEXTU |
Product: NEXT-7004N
Status : PUBLISHED
CVE-2023-2521 Description
A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input
leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-228012. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Metrics
CVSS Version: 3.1 |
Base Score: 3.5 LOW Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N l➤ Exploitability Metrics: Attack Vector (AV)* Attack Complexity (AC)* Privileges Required (PR)* User Interaction (UI)* Scope (S)* l➤ Impact Metrics: Confidentiality Impact (C)* Integrity Impact (I)* Availability Impact (A)* Weakness Enumeration (CWE)
CWE-ID: CWE-79 CWE Name: CWE-79 Cross Site Scripting Source: NEXTU Common Attack Pattern Enumeration and Classification (CAPEC)
CAPEC-ID: CAPEC Description:
Source: NVD (National Vulnerability Database).