CVE-2023-36223: XSS
Published Jul 3, 2023
·Updated
Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.
Affected Software
1 affected component
bbs-go bbs-go<=3.5.5
Event History
Jul 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-36223?
CVE-2023-36223 has a high severity due to its potential for remote code execution through Cross Site Scripting.
2
How do I fix CVE-2023-36223?
To fix CVE-2023-36223, update your bbs-go application to version 3.5.6 or later.
3
What are the potential impacts of CVE-2023-36223?
CVE-2023-36223 can lead to arbitrary code execution on vulnerable systems, compromising data integrity and security.
4
Who is affected by CVE-2023-36223?
Anyone using bbs-go versions 3.5.5 and prior is affected by CVE-2023-36223.
5
How does CVE-2023-36223 exploit vulnerabilities in bbs-go?
CVE-2023-36223 exploits the settings function by allowing a crafted payload in the announcements parameter to execute malicious code.