CVE-2023-50639: XSS
Published Dec 20, 2023
·Updated
Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.
Affected Software
2 affected components
Iscute Cute Http File Server=1.0
Iscute Cute Http File Server=2.0
Event History
Dec 20, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-50639?
CVE-2023-50639 is classified as a medium severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2023-50639?
To fix CVE-2023-50639, update to the latest versions of CuteHttpFileServer that address the XSS vulnerability.
3
Which versions of CuteHttpFileServer are affected by CVE-2023-50639?
CVE-2023-50639 affects CuteHttpFileServer versions 1.0 and 2.0.
4
What type of attack does CVE-2023-50639 enable?
CVE-2023-50639 enables attackers to perform Cross Site Scripting (XSS) attacks via the file upload function.
5
What sensitive information can be obtained through CVE-2023-50639?
Attackers can potentially obtain sensitive information from users interacting with the vulnerable file upload feature in CuteHttpFileServer.