Skip to content
OpenAdvisories
Unscored CVE-2023-38569 EUVD-2023-42368GHSA-wc5p-jvrj-r2v3

Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary scri…

Published Sep 5, 2023 · Updated Sep 30, 2024 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

Affected products

VendorProductAffectedFixed
SHIRASAGI Project SHIRASAGI prior to v1.18.0 —

References