npm/@scrypted/server CVE-2023-47620: medium 6.1, EPSS 0.47%
Scrypted Cross-site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.55.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xmhh-xrcc-mx36
- https://nvd.nist.gov/vuln/detail/CVE-2023-47620
- https://github.com/koush/scrypted
- https://github.com/koush/scrypted/blob/71cbe83a2a20f743342df695ca7b98482b73e60f/server/src/plugin/plugin-http.ts#L45
- https://securitylab.github.com/advisories/GHSL-2023-218_GHSL-2023-219_scrypted
CVE-2023-47620 · published · modified · JSON