What is GHSA-v98m-398x-269r?

GHSA-v98m-398x-269r is a security advisory published by GitHub Security Advisories with Medium severity. DOM-XSS on Backoffice login screen.

Which CVE IDs does GHSA-v98m-398x-269r cover?

GHSA-v98m-398x-269r covers the following CVE IDs: CVE-2023-48313. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v98m-398x-269r?

GHSA-v98m-398x-269r has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-v98m-398x-269r?

GHSA-v98m-398x-269r affects 2 products, including: nuget/Umbraco.CMS:\u003e= 10.0.0, \u003c 10.8.1; nuget/Umbraco.CMS:\u003e= 11.0.0, \u003c 12.3.4.

GHSA-v98m-398x-269rMediumCVSS 4.3

DOM-XSS on Backoffice login screen.

Vendor

GitHub Security Advisories

Published

December 13, 2023

Last Modified

April 22, 2024

🔗 CVE IDs covered (1)

CVE-2023-48313 →

📋 Description

Impact

Cross-site scripting (XSS) enable attackers to bring malicious content into a website or application.

Explanation of the vulnerability

A DOM-XSS can be exploited when users are successfully logging into the Backoffice.

🎯 Affected products2

nuget/Umbraco.CMS:>= 10.0.0, < 10.8.1
nuget/Umbraco.CMS:>= 11.0.0, < 12.3.4

🔗 References (3)

https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-v98m-398x-269r
https://nvd.nist.gov/vuln/detail/CVE-2023-48313
https://github.com/advisories/GHSA-v98m-398x-269r