kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.
References
Configurations
History
22 Jan 2024, 19:53
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:kodcloud:kodbox:1.43:*:*:*:*:*:*:* | |
CWE | CWE-79 | |
References | () https://blog.mo60.cn/index.php/archives/Kodbox_Stored_Xss.html_Password_Kodbox_Stored_Xss1 - Broken Link | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
First Time |
Kodcloud kodbox
Kodcloud |
16 Jan 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-16 22:15
Updated : 2025-06-17 16:15
NVD link : CVE-2023-52068
Mitre link : CVE-2023-52068
JSON object : View
Products Affected
kodcloud
- kodbox
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')