CVE-2023-4676: XSS in Yordams MedasPro
Published Sep 14, 2023
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS.
This issue affects MedasPro: before 28.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS.This issue affects MedasPro: before 28.
Affected Software
1 affected component
Yordam MedasPro<28
Event History
Sep 14, 2023
CVE Published
via MITRE·07:37 PM
Data Sourced
via MITRE·07:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-4676.
2
What is the severity of CVE-2023-4676?
The severity of CVE-2023-4676 is medium, with a severity value of 6.1.
3
What software is affected by CVE-2023-4676?
Yordam MedasPro version up to exclusive 28 is affected by CVE-2023-4676.
4
What is the impact of CVE-2023-4676?
CVE-2023-4676 allows for Reflected Cross-site Scripting (XSS) attacks.
5
Is there a fix available for CVE-2023-4676?
It is recommended to update Yordam MedasPro to version 28 or higher to fix CVE-2023-4676.