CVE-2023-38970
1 advisory.
Packagist/uasoft-indonesia/badaso CVE-2023-38970: medium 5.4, EPSS 0.68%
Badaso vulnerable to cross-site scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7422-7rq6-j4qv
- https://nvd.nist.gov/vuln/detail/CVE-2023-38970
- https://github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS3.md
- https://github.com/uasoft-indonesia/badaso
- https://panda002.hashnode.dev/badaso-version-297-has-an-xss-vulnerability-in-new-member
CVE-2023-38970 · published · modified · JSON