high8.7
CVE-2023-31223
Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.
Impact
Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dradisframework | Dradis | before 4.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-31223
- https://dradisframework.com/ce/security_reports.html#fixed-4.8.0
- https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/
- https://dradisframework.com/ce/security_reports.html#fixed-4.8.0
- https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/