{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-51445", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-12-19T13:52:41.787Z", "datePublished": "2024-03-20T15:14:49.682Z", "dateUpdated": "2024-08-21T23:01:43.594Z"}, "containers": {"cna": {"title": "GeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources API", "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "lang": "en", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w"}, {"name": "https://github.com/geoserver/geoserver/pull/7161", "tags": ["x_refsource_MISC"], "url": "https://github.com/geoserver/geoserver/pull/7161"}, {"name": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "tags": ["x_refsource_MISC"], "url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad"}, {"name": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "tags": ["x_refsource_MISC"], "url": "https://osgeo-org.atlassian.net/browse/GEOS-11148"}], "affected": [{"vendor": "geoserver", "product": "geoserver", "versions": [{"version": "< 2.23.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-03-20T15:14:49.682Z"}, "descriptions": [{"lang": "en", "value": "GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources that will execute in the context of another administrator's browser when viewed in the REST Resources API. Access to the REST Resources API is limited to full administrators by default and granting non-administrators access to this endpoint should be carefully considered as it may allow access to files containing sensitive information. Versions 2.23.3 and 2.24.0 contain a patch for this issue."}], "source": {"advisory": "GHSA-fh7p-5f6g-vj2w", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:32:10.066Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w"}, {"name": "https://github.com/geoserver/geoserver/pull/7161", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/geoserver/geoserver/pull/7161"}, {"name": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad"}, {"name": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://osgeo-org.atlassian.net/browse/GEOS-11148"}]}, {"affected": [{"vendor": "geoserver", "product": "geoserver", "cpes": ["cpe:2.3:a:geoserver:geoserver:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.23.3", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-20T19:31:18.658124Z", "id": "CVE-2023-51445", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-21T23:01:43.594Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "name": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/geoserver/geoserver/pull/7161", "name": "https://github.com/geoserver/geoserver/pull/7161", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "name": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "name": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:32:10.066Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-51445", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-20T19:31:18.658124Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:geoserver:geoserver:*:*:*:*:*:*:*:*"], "vendor": "geoserver", "product": "geoserver", "versions": [{"status": "affected", "version": "0", "lessThan": "2.23.3", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-21T23:01:40.180Z"}}], "cna": {"title": "GeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources API", "source": {"advisory": "GHSA-fh7p-5f6g-vj2w", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "geoserver", "product": "geoserver", "versions": [{"status": "affected", "version": "< 2.23.3"}]}], "references": [{"url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "name": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/geoserver/geoserver/pull/7161", "name": "https://github.com/geoserver/geoserver/pull/7161", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "name": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad", "tags": ["x_refsource_MISC"]}, {"url": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "name": "https://osgeo-org.atlassian.net/browse/GEOS-11148", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources that will execute in the context of another administrator's browser when viewed in the REST Resources API. Access to the REST Resources API is limited to full administrators by default and granting non-administrators access to this endpoint should be carefully considered as it may allow access to files containing sensitive information. Versions 2.23.3 and 2.24.0 contain a patch for this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-03-20T15:14:49.682Z"}}}, "cveMetadata": {"cveId": "CVE-2023-51445", "state": "PUBLISHED", "dateUpdated": "2024-08-21T23:01:43.594Z", "dateReserved": "2023-12-19T13:52:41.787Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-03-20T15:14:49.682Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:geoserver:geoserver:*:*:*:*:*:*:*:*", "matchCriteriaId": "76D6CFB3-1A7B-4436-B927-6455629A0062", "versionEndExcluding": "2.23.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources that will execute in the context of another administrator's browser when viewed in the REST Resources API. Access to the REST Resources API is limited to full administrators by default and granting non-administrators access to this endpoint should be carefully considered as it may allow access to files containing sensitive information. Versions 2.23.3 and 2.24.0 contain a patch for this issue."}, {"lang": "es", "value": "GeoServer es un servidor de software de c\u00f3digo abierto escrito en Java que permite a los usuarios compartir y editar datos geoespaciales. Existe una vulnerabilidad de Cross Site Scripting (XSS) almacenado en versiones anteriores a 2.23.3 y 2.24.0 que permite a un administrador autenticado con privilegios a nivel de espacio de trabajo almacenar un payload de JavaScript en recursos de estilo/leyenda cargados que se ejecutar\u00e1n en el contexto del navegador de otro administrador cuando se visualicen en la API de recursos REST. El acceso a la API de recursos REST est\u00e1 limitado a administradores completos de forma predeterminada y se debe considerar cuidadosamente la concesi\u00f3n de acceso a este endpoint a personas que no sean administradores, ya que puede permitir el acceso a archivos que contienen informaci\u00f3n confidencial. Las versiones 2.23.3 y 2.24.0 contienen un parche para este problema."}], "id": "CVE-2023-51445", "lastModified": "2024-12-18T21:56:24.053", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "[email protected]", "type": "Primary"}]}, "published": "2024-03-20T16:15:07.640", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://github.com/geoserver/geoserver/pull/7161"}, {"source": "[email protected]", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://osgeo-org.atlassian.net/browse/GEOS-11148"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://github.com/geoserver/geoserver/pull/7161"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-fh7p-5f6g-vj2w"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://osgeo-org.atlassian.net/browse/GEOS-11148"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}