CVE-2023-49489: XSS
Published Dec 19, 2023
·Updated
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php.
Affected Software
1 affected component
Kodcloud Kodexplorer=4.51
Event History
Dec 19, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-49489?
CVE-2023-49489 is rated as a high severity vulnerability due to its potential to expose sensitive information and escalate privileges.
2
How do I fix CVE-2023-49489?
To fix CVE-2023-49489, upgrade to the latest version of KodExplorer that addresses this vulnerability.
3
What types of attacks can CVE-2023-49489 facilitate?
CVE-2023-49489 can facilitate reflective Cross Site Scripting (XSS) attacks that can lead to information leakage and privilege escalation.
4
Which version of KodExplorer is affected by CVE-2023-49489?
CVE-2023-49489 specifically affects KodExplorer version 4.51.
5
Where can I find more information about CVE-2023-49489?
More information about CVE-2023-49489 can be found on the official KodExplorer GitHub repository.