CVE-2023-4492 — Easy Address Book Web Server XSS vulnerability

CVE-2023-4492

Easy Address Book Web Server XSS vulnerability PUBLISHED

Description (CNA)

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded

Affected (CNA)

Vendor / product	Versions
EFS Software / Easy Address Book Web Server	affected 1.6

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products

CISA-ADP

No English description supplied.

No references supplied.