Unrated severityNVD Advisory· Published Sep 11, 2023· Updated Sep 26, 2024

CVE-2023-38878

Description

A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a remote attacker to execute arbitrary JavaScript in the web browser of a victim by injecting a malicious payload into the 'error' and 'error_description' parameters of 'oauth2.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Devcode/Openstamanagercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2.4.24 to 2.4.47

Patches

Vulnerability mechanics

References

github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38878mitre
openstamanager.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000