CVE-2023-30326 — MEDIUM (6.1)

Vulnerability Description

Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Chatengine Project	Chatengine	1.0

Related Weaknesses (CWE)

CWE-79

References

https://github.com/wliang6/ChatEngine/blob/master/WebContent/WEB-INF/lib/chatboxProduct
https://payatu.com/advisory/cross-site-scripting-vulnerability-in-username-fieldThird Party Advisory
https://github.com/wliang6/ChatEngine/blob/master/WebContent/WEB-INF/lib/chatboxProduct
https://payatu.com/advisory/cross-site-scripting-vulnerability-in-username-fieldThird Party Advisory

FAQ

What is CVE-2023-30326?

CVE-2023-30326 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arb...

How severe is CVE-2023-30326?

CVE-2023-30326 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-30326?

Check the references section above for vendor advisories and patch information. Affected products include: Chatengine Project Chatengine.