CVE-2023-1239
published 2023-03-07CVE-2023-1239: Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
PriorityP419medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.53%
40.5th percentile
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| answer | answer | < 1.0.6 | 1.0.6 |
| answerdev | answerdev_answer | >= unspecified < 1.0.6 | 1.0.6 |
| github.com | answerdev_answer | >= 0 < 1.0.6 | 1.0.6 |
CVSS provenance
nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
nvdv3.06.0MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
osv·2024-08-20
CVE-2023-1239 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
GHSA
Answer vulnerable to Cross-site Scripting
ghsa·2023-03-07
CVE-2023-1239 [MEDIUM] CWE-79 Answer vulnerable to Cross-site Scripting
Answer vulnerable to Cross-site Scripting
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
OSV
Answer vulnerable to Cross-site Scripting
osv·2023-03-07
CVE-2023-1239 [MEDIUM] Answer vulnerable to Cross-site Scripting
Answer vulnerable to Cross-site Scripting
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
Red Hat
hw: amd: Cross-Process Information Leak
vendor_redhat·2023-07-25·CVSS 5.5
CVE-2023-20593 [MEDIUM] CWE-1239 hw: amd: Cross-Process Information Leak
hw: amd: Cross-Process Information Leak
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: microcode_ctl (Red Hat Enterprise Linux 6) - Not affected
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-07
Published