1. Home
  2. CVE Database
  3. CVE-2023-48244
MEDIUM · 5.3

CVE-2023-48244

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.

Vulnerability Description

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
BoschNexo-Os>= 1000, <= 1500-sp2
BoschNexo Cordless Nutrunner Nxa011S-36V-B \(0608842012\)-
BoschNexo Cordless Nutrunner Nxa011S-36V \(0608842011\)-
BoschNexo Cordless Nutrunner Nxa015S-36V-B \(0608842006\)-
BoschNexo Cordless Nutrunner Nxa015S-36V \(0608842001\)-
BoschNexo Cordless Nutrunner Nxa030S-36V-B \(0608842007\)-
BoschNexo Cordless Nutrunner Nxa030S-36V \(0608842002\)-
BoschNexo Cordless Nutrunner Nxa050S-36V-B \(0608842008\)-
BoschNexo Cordless Nutrunner Nxa050S-36V \(0608842003\)-
BoschNexo Cordless Nutrunner Nxa065S-36V-B \(0608842014\)-
BoschNexo Cordless Nutrunner Nxa065S-36V \(0608842013\)-
BoschNexo Cordless Nutrunner Nxp012Qd-36V-B \(0608842010\)-
BoschNexo Cordless Nutrunner Nxp012Qd-36V \(0608842005\)-
BoschNexo Cordless Nutrunner Nxv012T-36V-B \(0608842016\)-
BoschNexo Cordless Nutrunner Nxv012T-36V \(0608842015\)-
BoschNexo Special Cordless Nutrunner \(0608Pe2272\)-
BoschNexo Special Cordless Nutrunner \(0608Pe2301\)-
BoschNexo Special Cordless Nutrunner \(0608Pe2514\)-
BoschNexo Special Cordless Nutrunner \(0608Pe2515\)-
BoschNexo Special Cordless Nutrunner \(0608Pe2666\)-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2023-48244?

CVE-2023-48244 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.

How severe is CVE-2023-48244?

CVE-2023-48244 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-48244?

Check the references section above for vendor advisories and patch information. Affected products include: Bosch Nexo-Os, Bosch Nexo Cordless Nutrunner Nxa011S-36V-B \(0608842012\), Bosch Nexo Cordless Nutrunner Nxa011S-36V \(0608842011\), Bosch Nexo Cordless Nutrunner Nxa015S-36V-B \(0608842006\), Bosch Nexo Cordless Nutrunner Nxa015S-36V \(0608842001\).