CVE-2023-31928 — Cross-site Scripting in Brocade Fabric Operating System

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
CNA6.3
EPSS
0.1%
top 68.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Brocade Fabric Operating SystemBrocade Fabric OS
Timeline
PublishedAug 2

Description

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5brocade/fabric_osbefore Brocade Fabric OS v9.2.0

🔴Vulnerability Details

2
GHSA
GHSA-995r-hfcw-r5pv: A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting↗2023-08-02
▶
CVEList
XSS vulnerability in Brocade Webtools↗2023-08-01
▶
CVE-2023-31928 — Cross-site Scripting | cvebase