CVE-2023-31698 — 脆弱性インテリジェンス

bludit — bludit

公表日: 2023-05-17T00:00:00.000Z

CVSS

5.4

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).

情報源

• CVE-2023-31698
• Original advisory
• Original advisory
• Exploit
• CVE-2023-31698