What is CVE-2023-41922?

CVE-2023-41922 is a high-severity vulnerability in Kiloview P1, classified under Cross-site Scripting. CVSS score: 7.2/10. Published 2024-07-02.

How severe is CVE-2023-41922?

High severity. CVSS v3 base score is 7.2 out of 10.

XSS in Kiloview P1

CVE-2023-41922

A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input validation, resulting in multiple instances of Stored XSS vulnerabilities.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (15.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N.

Affected products

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cert@ncsc.nl (Third Party Advisory)

Frequently asked questions

What is CVE-2023-41922?: CVE-2023-41922 is a high-severity vulnerability in Kiloview P1, classified under Cross-site Scripting. CVSS score: 7.2/10. Published 2024-07-02.
How severe is CVE-2023-41922?: High severity. CVSS v3 base score is 7.2 out of 10.