medium6.1
CVE-2023-23078
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets.
Impact
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | Version 14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23078.html
- https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23078.html