CVE-2023-38040: XSS
Published Sep 17, 2023
·Updated
A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..
Affected Software
1 affected component
revive-adserver Revive Adserver<=5.4.1
Event History
Sep 17, 2023
CVE Published
via MITRE·04:41 AM
Data Sourced
via MITRE·04:41 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-38040.
2
What is the severity of CVE-2023-38040?
The severity of CVE-2023-38040 is medium with a CVSS score of 6.1.
3
What is the affected software for CVE-2023-38040?
The affected software for CVE-2023-38040 is Revive Adserver 5.4.1 and earlier versions.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-38040?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-38040 is CWE-79.
5
How can I fix the reflected XSS vulnerability in Revive Adserver 5.4.1 and earlier versions?
To fix the reflected XSS vulnerability, it is recommended to upgrade to a version of Revive Adserver that is not affected by the vulnerability.