CVE-2023-1197: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

March 6, 2023 (updated March 7, 2023)

Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.

References

github.com/advisories/GHSA-hfxp-j95j-cwrp
github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0
huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26
nvd.nist.gov/vuln/detail/CVE-2023-1197

Detect and mitigate CVE-2023-1197 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →