A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-232953 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Onesttech |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-44164 | A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-232953 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://vuldb.com/?ctiid.232953 |
|
| https://vuldb.com/?id.232953 |
|
History
Mon, 28 Oct 2024 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-10-28T17:43:33.331Z
Reserved: 2023-07-04T13:48:11.686Z
Link: CVE-2023-3505
Vulnrichment
Updated: 2024-08-02T06:55:03.644Z
NVD
Status : Modified
Published: 2023-07-04T16:15:09.620
Modified: 2024-11-21T08:17:24.700
Link: CVE-2023-3505
Redhat
No data.
OpenCVE Enrichment
No data.