CVE-2023-3109: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

June 5, 2023 (updated June 14, 2023)

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

References

github.com/admidio/admidio/commit/a7c211b835cafe1158932fbfcff9e5552e57510a
github.com/advisories/GHSA-gx4r-fvwg-8678
huntr.dev/bounties/6fa6070e-8f7f-43ae-8a84-e36b28256123
nvd.nist.gov/vuln/detail/CVE-2023-3109

Code Behaviors & Features

Detect and mitigate CVE-2023-3109 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →