CVE-2023-46374

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46374
ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://narrow-payment-2cd.notion.site/ZenTao-4-1-3-is-vulnerable-to-Cross-Site-Scripting-xss-CVE-2023-46374-ebdc61e7a88443b481b649764ba66dee Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:zentao:biz:*:*:*:*:enterprise:*:*:*
History

03 Nov 2023, 20:23

Type Values Removed Values Added
CWE CWE-79
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
References (MISC) https://narrow-payment-2cd.notion.site/ZenTao-4-1-3-is-vulnerable-to-Cross-Site-Scripting-xss-CVE-2023-46374-ebdc61e7a88443b481b649764ba66dee - (MISC) https://narrow-payment-2cd.notion.site/ZenTao-4-1-3-is-vulnerable-to-Cross-Site-Scripting-xss-CVE-2023-46374-ebdc61e7a88443b481b649764ba66dee - Exploit, Third Party Advisory
CPE cpe:2.3:a:zentao:biz:*:*:*:*:enterprise:*:*:*
First Time Zentao
Zentao biz

27 Oct 2023, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-27 00:15

Updated : 2024-02-28 20:33

NVD link : CVE-2023-46374

Mitre link : CVE-2023-46374

CVE.ORG link : CVE-2023-46374

JSON object : View

Products Affected

zentao

  • biz
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')