CVE-2023-28873: XSS
Published Dec 9, 2023
·Updated
An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.
Affected Software
1 affected component
Seafile Seafile=9.0.6
Event History
Dec 9, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-28873?
The severity of CVE-2023-28873 is rated as medium with a CVSS score of 5.4.
2
How can I exploit the XSS issue in Seafile 9.0.6?
Attackers can exploit the XSS issue in Seafile 9.0.6 by injecting JavaScript into the Markdown editor on wiki and discussion pages.
3
Is there a fix available for the XSS vulnerability in Seafile 9.0.6?
To mitigate the XSS vulnerability in Seafile 9.0.6, users should update to a patched version provided by the vendor.