The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a new index and inject a malicious web script into its name, that will execute whenever a user accesses the search page.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/itsAptx/CVE-2023-45471 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-10-20T00:00:00
Updated: 2024-09-12T14:46:00.549Z
Reserved: 2023-10-09T00:00:00
Link: CVE-2023-45471
Vulnrichment
Updated: 2024-08-02T20:21:16.206Z
NVD
Status : Modified
Published: 2023-10-20T04:15:10.720
Modified: 2024-11-21T08:26:54.647
Link: CVE-2023-45471
Redhat
No data.