CVE-2023-3035: Guangdong Pythagorean OA Office System Schedule cross site scripting
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Schedule Handler. The manipulation of the argument description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230467.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Guangdong Pythagorean OA Office System vulnerability?
The vulnerability ID for this Guangdong Pythagorean OA Office System vulnerability is CVE-2023-3035.
What is the severity rating of CVE-2023-3035?
The severity rating of CVE-2023-3035 is medium with a CVSS score of 5.4.
What is the affected software for CVE-2023-3035?
The affected software for CVE-2023-3035 is Guangdong Pythagorean OA Office System up to version 4.50.31.
What type of vulnerability is CVE-2023-3035?
CVE-2023-3035 is a cross-site scripting (XSS) vulnerability.
How can I fix the Guangdong Pythagorean OA Office System Schedule cross-site scripting vulnerability?
To fix the Guangdong Pythagorean OA Office System Schedule cross-site scripting vulnerability, update the software to version 4.50.32 or apply the necessary patches or mitigations provided by the vendor.