What is GHSA-5h47-9rm5-fx3f?

GHSA-5h47-9rm5-fx3f is a security advisory published by GitHub Security Advisories with Medium severity. Evolution CMS Cross-site Scripting vulnerability

Which CVE IDs does GHSA-5h47-9rm5-fx3f cover?

GHSA-5h47-9rm5-fx3f covers the following CVE IDs: CVE-2023-43341. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5h47-9rm5-fx3f?

GHSA-5h47-9rm5-fx3f has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-5h47-9rm5-fx3f?

GHSA-5h47-9rm5-fx3f affects 1 product, including: composer/evolutioncms/evolution:\u003c= 3.2.3.

GHSA-5h47-9rm5-fx3fMediumCVSS 6.1

Evolution CMS Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

October 20, 2023

Last Modified

November 9, 2023

🔗 CVE IDs covered (1)

CVE-2023-43341 →

📋 Description

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

🎯 Affected products1

composer/evolutioncms/evolution:<= 3.2.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-43341
https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-
https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection-
https://github.com/advisories/GHSA-5h47-9rm5-fx3f