CVE-2023-2191

Packagist/azuracast/azuracast CVE-2023-2191: low 3.5

AzuraCast/AzuraCast vulnerable to cross-site scripting

Action: Upgrade azuracast/azuracast to 0.18.0 or later.

composer require azuracast/azuracast:0.18.0

Affected

Fixed versions

Sources

• osv: GHSA-q55c-hmpf-6h2g
• https://nvd.nist.gov/vuln/detail/CVE-2023-2191
• https://github.com/azuracast/azuracast/commit/24276cb4166b2057de73569ec33046a80a8bb437
• https://github.com/AzuraCast/AzuraCast
• https://github.com/AzuraCast/AzuraCast/blob/main/CHANGELOG.md#azuracast-0180-apr-19-2023
• https://huntr.dev/bounties/0814f5f9-8b58-40e5-b08c-7c488947cf31

CVE-2023-2191 · published 2023-04-20T03:30:16Z · modified 2024-02-16T08:05:57.572379Z · JSON