CVE-2023-1535
published 2023-03-21CVE-2023-1535: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
PriorityP424medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.54%
41.1th percentile
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| answer | answer | < 1.0.7 | 1.0.7 |
| answerdev | answerdev_answer | >= unspecified < 1.0.7 | 1.0.7 |
| github.com | answerdev_answer | >= 0 < 1.0.7 | 1.0.7 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv3.08.3HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
osv·2024-08-20
CVE-2023-1535 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
OSV
Answer vulnerable to Stored Cross-site Scripting
osv·2023-03-21
CVE-2023-1535 [MEDIUM] Answer vulnerable to Stored Cross-site Scripting
Answer vulnerable to Stored Cross-site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
GHSA
Answer vulnerable to Stored Cross-site Scripting
ghsa·2023-03-21
CVE-2023-1535 [MEDIUM] CWE-79 Answer vulnerable to Stored Cross-site Scripting
Answer vulnerable to Stored Cross-site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-21
Published