CVE-2023-34599

MEDIUMNuclei

Gibbon v25.0.0 - Cross-Site Scripting

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-34599 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 26, 2024 · Source: CVE List

Proofs of concept

1

Repository PoCs

GitHubmaddsec/CVE-2023-34599Repository PoCby maddsec3Not analyzed1 file

4.8 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMGibbon v25.0.0 - Cross-Site ScriptingCVSS 6.1

Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement.

Remediation

Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscve2023cvegibbonxssauthenticatedintrusivegibboneduvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:gibbonedu:gibbon:25.0.00:*:*:*:*:*:*:*
Shodan: http.favicon.hash:-165631681
Shodan: http.favicon.hash:"-165631681"
FOFA: icon_hash="-165631681"
https://github.com/maddsec/CVE-2023-34599 https://vulmon.com/searchpage?q=CVE-2023-34599 https://github.com/Imahian/CVE-2023-34599 https://github.com/hheeyywweellccoommee/CVE-2023-34599-xsddo https://github.com/nomi-sec/PoC-in-GitHub

Source: ProjectDiscovery

References

2