CVE-2023-3971

Description

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

NVD

Severity: MEDIUM
CVE ID: CVE-2023-3971
CVSS Score: 5.4
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Red Hat, Inc.

Severity: HIGH
CVE ID: CVE-2023-3971
CVSS Score: 7.3
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Refrence: NVDMITRE

Proof Of Concept

ashangp923

To find HTML injection and XSS

Refrence: GitHub

Content on GitHub

Arajawat007 | watchers:0

CVE-2023-39714

Refrence: GitHub

Arajawat007 | watchers:0

CVE-2023-39710

Refrence: GitHub

Arajawat007 | watchers:0

CVE-2023-39712

Refrence: GitHub

Arajawat007 | watchers:0

CVE-2023-39711

Refrence: GitHub