Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.
References
Link | Resource |
---|---|
https://cert.pl/en/posts/2023/12/CVE-2023-5378 | Third Party Advisory |
https://cert.pl/posts/2023/12/CVE-2023-5378 | Third Party Advisory |
https://megabip.pl/ | Product |
https://smod.pl/ | Product |
Configurations
Configuration 1 (hide)
|
History
10 Oct 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
Summary | (en) Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown. | |
CWE |
19 Feb 2024, 12:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown. |
02 Feb 2024, 02:06
Type | Values Removed | Values Added |
---|---|---|
First Time |
Megabip
Smod Megabip megabip Smod smodbip |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
CWE | CWE-79 | |
References | () https://megabip.pl/ - Product | |
References | () https://cert.pl/posts/2023/12/CVE-2023-5378 - Third Party Advisory | |
References | () https://smod.pl/ - Product | |
References | () https://cert.pl/en/posts/2023/12/CVE-2023-5378 - Third Party Advisory | |
CPE | cpe:2.3:a:megabip:megabip:*:*:*:*:*:*:*:* cpe:2.3:a:smod:smodbip:*:*:*:*:*:*:*:* |
29 Jan 2024, 12:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-29 12:15
Updated : 2024-10-10 16:15
NVD link : CVE-2023-5378
Mitre link : CVE-2023-5378
CVE.ORG link : CVE-2023-5378
JSON object : View
Products Affected
megabip
- megabip
smod
- smodbip
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')