cbcvebase.

Sos-Berlin Joc-Cockpit vulnerabilities

1 known vulnerability affecting sos-berlin/joc-cockpit.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2023-37272P4MEDIUMCVSS 5.4fixed in 1.13.192023-07-13
CVE-2023-37272 [MEDIUM] CWE-79 CVE-2023-37272: JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-gene JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation for JOC Cockpit. Specifically crafted file names allow an XSS attack to inject code that is executed with the browser. Risk of the vulnerability is considered high for branch 1.13 of JobScheduler (JS1). The vulnerability does not af
nvd
Sos-Berlin Joc-Cockpit vulnerabilities | cvebase