Skip to content
OpenAdvisories
Unscored CVE-2023-36492 EUVD-2023-40441GHSA-v49w-8pf7-cffv

Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary…

Published Sep 5, 2023 · Updated Sep 30, 2024 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

Affected products

VendorProductAffectedFixed
SHIRASAGI Project SHIRASAGI prior to v1.18.0 —

References