CVE-2023-0325: XSS
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-0325?
CVE-2023-0325 is a vulnerability in Uvdesk version 1.1.1 that allows an unauthenticated remote attacker to exploit a stored XSS in the application.
How does CVE-2023-0325 affect Uvdesk version 1.1.1?
CVE-2023-0325 affects Uvdesk version 1.1.1 by allowing an unauthenticated remote attacker to exploit a stored XSS vulnerability in the application.
What is the severity of CVE-2023-0325?
The severity of CVE-2023-0325 is medium with a CVSS score of 6.1.
How can an attacker exploit CVE-2023-0325?
An attacker can exploit CVE-2023-0325 by sending a malicious message in a ticket to the Uvdesk application.
Is there a fix available for CVE-2023-0325?
Yes, updating to a version of Uvdesk that is not affected by CVE-2023-0325 will fix the vulnerability.