A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/172588/SCM-Manager-1.60-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
| https://bitbucket.org/sdorra/docker-scm-manager/src/master/ | Third Party Advisory |
| https://github.com/n3gox/Stored-XSS-on-SCM-Manager-1.60 | Exploit Third Party Advisory |
Configurations
History
31 May 2023, 01:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cloudogu:scm_manager:*:*:*:*:*:*:*:* | |
| First Time |
Cloudogu
Cloudogu scm Manager |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CWE | CWE-79 | |
| References | (MISC) https://bitbucket.org/sdorra/docker-scm-manager/src/master/ - Third Party Advisory | |
| References | (MISC) http://packetstormsecurity.com/files/172588/SCM-Manager-1.60-Cross-Site-Scripting.html - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://github.com/n3gox/Stored-XSS-on-SCM-Manager-1.60 - Exploit, Third Party Advisory |
26 May 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2023-05-24 21:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-33829
Mitre link : CVE-2023-33829
CVE.ORG link : CVE-2023-33829
JSON object : View
Products Affected
cloudogu
- scm_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')