CVE-2023-52048: XSS
Published Feb 28, 2024
·Updated
RuoYi v4.7.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/notice/.
Affected Software
2 affected components
Ruoyi Ruoyi
Ruoyi Ruoyi=4.7.8
Event History
Feb 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52048?
CVE-2023-52048 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2023-52048?
To fix CVE-2023-52048, input validation and output encoding should be implemented in the affected /system/notice/ component.
3
What software is affected by CVE-2023-52048?
CVE-2023-52048 affects RuoYi version 4.7.8.
4
What kind of attack can CVE-2023-52048 be exploited for?
CVE-2023-52048 can be exploited for cross-site scripting (XSS) attacks.
5
When was CVE-2023-52048 discovered?
CVE-2023-52048 was discovered in RuoYi version 4.7.8.