A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2023-10-04T08:07:46.459Z
Updated: 2024-09-19T19:55:17.251Z
Reserved: 2023-09-28T02:30:04.107Z
Link: CVE-2023-44272
Vulnrichment
Updated: 2024-08-02T19:59:51.930Z
NVD
Status : Modified
Published: 2023-10-04T09:15:31.810
Modified: 2024-11-21T08:25:33.773
Link: CVE-2023-44272
Redhat
No data.