CVE-2023-1242
published 2023-03-07CVE-2023-1242: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
PriorityP424medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.62%
45.2th percentile
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| answer | answer | < 1.0.6 | 1.0.6 |
| answerdev | answerdev_answer | >= unspecified < 1.0.6 | 1.0.6 |
| github.com | answerdev_answer | >= 0 < 1.0.6 | 1.0.6 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv3.08.0HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vendor_redhat5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
osv·2024-08-20
CVE-2023-1242 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
GHSA
Answer vulnerable to Cross-site Scripting
ghsa·2023-03-07
CVE-2023-1242 [MEDIUM] CWE-79 Answer vulnerable to Cross-site Scripting
Answer vulnerable to Cross-site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
OSV
Answer vulnerable to Cross-site Scripting
osv·2023-03-07
CVE-2023-1242 [MEDIUM] Answer vulnerable to Cross-site Scripting
Answer vulnerable to Cross-site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
Red Hat
kernel: net: sched: sch: Bounds check priority
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52734 [LOW] CWE-125 kernel: net: sched: sch: Bounds check priority
kernel: net: sched: sch: Bounds check priority
[REJECTED CVE] In the Linux kernel, the following vulnerability has been resolved:
net: sched: sch: Bounds check priority
The Linux kernel CVE team has assigned CVE-2023-52734 to this issue.
Statement: This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2024052800-REJECTED-1242@gregkh/
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 8) - Affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Affected
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-07
Published