CVE-2023-39369
Assigner: INCD
Published: 2023-09-03T14:26:05.184Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Softswitch
vendor: StarTrinity
versions: lessThan: Upgrade to version 2023-07-27
status: affected
version: version 2023-02-16
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Moshe Mizrahi
datePublic: 2023-09-03T13:42:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">StarTrinity Softswitch version 2023-02-16</span><span style="background-color: rgb(255, 255, 255);">&nbsp;- Multiple Reflected XSS (CWE-79)</span>

<br>
value: 
StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)



metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Upgrade to version 2023-07-27</span>


value: 
Upgrade to version 2023-07-27


source: advisory: ILVN-2023-0126
discovery: UNKNOWN
title:  StarTrinity Softswitch version 2023-02-16 - multiple Reflected XSS (CWE-79)
x_generator: engine: Vulnogram 0.1.0-dev