medium5.4
CVE-2023-27075
Stored cross site scripting in Microbin
Impact
A cross-site scripting vulnerability (XSS) in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | microbin | < 1.2.1 | 1.2.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microbin | Microbin | Version 1.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/szabodanika/microbin/issues/142
- https://github.com/szabodanika/microbin/pull/143
- https://github.com/advisories/GHSA-mphm-gqh9-q59x
- https://nvd.nist.gov/vuln/detail/CVE-2023-27075
- https://github.com/szabodanika/microbin/pull/143/commits/6907bb4f13faf13e45d4a2cd0f9a8c562086e6ca