Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2023-23408

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.5MEDIUM
No vector
EPSS
7.6%
top 8.15%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Azure Hdinsight
Timeline
PublishedMar 14
Latest updateJun 26

Description

Azure Apache Ambari Spoofing Vulnerability Azure Apache Ambari Spoofing Vulnerability

Affected Packages1 packages

▶CVEListV5microsoft/azure_hdinsight1.0 — 2302250400

🔴Vulnerability Details

1
CVEList
Azure Apache Ambari Spoofing Vulnerability↗2023-03-14
▶

💥Exploits & PoCs

1
Exploit-DB
Azure Apache Ambari 2302250400 - Spoofing↗2023-06-26
▶

📋Vendor Advisories

1
Microsoft
Azure Apache Ambari Spoofing Vulnerability↗2023-03-14
▶
CVE-2023-23408 (MEDIUM CVSS 4.5) | Azure Apache Ambari Spoofing Vulner | cvebase.io