CVE-2023-40812: XSS
First published: Sat Nov 18 2023(Updated: )
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.opencrx:opencrx-core-models | <=5.2.0 | |
| Opencrx Opencrx | =5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-40812?
CVE-2023-40812 is a vulnerability in OpenCRX version 5.2.0 that allows for HTML injection via the Accounts Group Name Field.
How does CVE-2023-40812 affect OpenCRX?
CVE-2023-40812 affects OpenCRX version 5.2.0 by allowing an attacker to inject HTML code via the Accounts Group Name Field, which can potentially lead to various security risks.
What is the severity of CVE-2023-40812?
The severity of CVE-2023-40812 is dependent on the context in which the injected HTML code is executed, but it has the potential to lead to unauthorized access, data leakage, or other security issues.
How can I fix CVE-2023-40812 in OpenCRX version 5.2.0?
To fix CVE-2023-40812 in OpenCRX version 5.2.0, it is recommended to apply the latest patches or updates provided by the vendor, or consider upgrading to a newer version that addresses the vulnerability.
Where can I find more information about CVE-2023-40812?
More information about CVE-2023-40812 can be found at the following references: [https://www.esecforte.com/cve-2023-40812-html-injection-accounts-group/](https://www.esecforte.com/cve-2023-40812-html-injection-accounts-group/), [https://nvd.nist.gov/vuln/detail/CVE-2023-40812](https://nvd.nist.gov/vuln/detail/CVE-2023-40812), [https://github.com/advisories/GHSA-3g79-j8hq-r4xv](https://github.com/advisories/GHSA-3g79-j8hq-r4xv).
- collector/github-advisory-latest
- alias/GHSA-3g79-j8hq-r4xv
- alias/CVE-2023-40812
- collector/nvd-cve
- collector/nvd-api
- collector/github-advisory
- agent/type
- agent/author
- agent/softwarecombine
- agent/first-publish-date
- collector/epss-latest
- source/FIRST
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/epss
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/trending
- package-manager/maven
- vendor/opencrx
- canonical/opencrx opencrx
- version/opencrx opencrx/5.2.0