A vulnerability, which was classified as problematic, was found in NeoMind Fusion Platform up to 20230731. Affected is an unknown function of the file /fusion/portal/action/Link. The manipulation of the argument link leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238026 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.238026 | Permissions Required |
| https://vuldb.com/?id.238026 | Permissions Required |
| https://l6x.notion.site/PoC-9f23bb9757374f82981de81604500d98?pvs=4 | Exploit |
Configurations
History
07 Nov 2023, 04:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:neomind:fusion_platform:*:*:*:*:*:*:*:* | |
| First Time |
Neomind
Neomind fusion Platform |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| References | (MISC) https://vuldb.com/?ctiid.238026 - Permissions Required | |
| References | (MISC) https://l6x.notion.site/PoC-9f23bb9757374f82981de81604500d98?pvs=4 - Exploit | |
| References | (MISC) https://vuldb.com/?id.238026 - Permissions Required |
25 Aug 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-25 15:15
Updated : 2024-05-17 02:31
NVD link : CVE-2023-4534
Mitre link : CVE-2023-4534
JSON object : View
Products Affected
neomind
- fusion_platform
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')