CVE-2023-5378

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:megabip:megabip:*:*:*:*:*:*:*:*
cpe:2.3:a:smod:smodbip:*:*:*:*:*:*:*:*

History

10 Oct 2024, 16:15

Type Values Removed Values Added
Summary (en) Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown. (en) Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.
CWE CWE-20

19 Feb 2024, 12:15

Type Values Removed Values Added
Summary Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2 (newer versions were not tested; the vendor has not confirmed fixing the vulnerability). Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

02 Feb 2024, 02:06

Type Values Removed Values Added
First Time Megabip
Smod
Megabip megabip
Smod smodbip
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.4
CWE CWE-79
References () https://megabip.pl/ - () https://megabip.pl/ - Product
References () https://cert.pl/posts/2023/12/CVE-2023-5378 - () https://cert.pl/posts/2023/12/CVE-2023-5378 - Third Party Advisory
References () https://smod.pl/ - () https://smod.pl/ - Product
References () https://cert.pl/en/posts/2023/12/CVE-2023-5378 - () https://cert.pl/en/posts/2023/12/CVE-2023-5378 - Third Party Advisory
CPE cpe:2.3:a:megabip:megabip:*:*:*:*:*:*:*:*
cpe:2.3:a:smod:smodbip:*:*:*:*:*:*:*:*

29 Jan 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-29 12:15

Updated : 2024-10-10 16:15


NVD link : CVE-2023-5378

Mitre link : CVE-2023-5378

CVE.ORG link : CVE-2023-5378


JSON object : View

Products Affected

megabip

  • megabip

smod

  • smodbip
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')