VYPR
← All advisories
High severity8.6NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026

CVE-2023-5950

CVE-2023-5950

Description

Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user's web browser. This vulnerability is fixed in version 0.7.0-04 and a patch is available to download. Patches are also available for version 0.6.9 (0.6.9-1).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Rapid7/Velociraptor6 versions
    cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*range: <0.6.9-1
    • cpe:2.3:a:rapid7:velociraptor:0.7.0-3:*:*:*:*:*:*:*
    • cpe:2.3:a:rapid7:velociraptor:0.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:rapid7:velociraptor:0.7.0:rc1:*:*:*:*:*:*
    • (no CPE)range: <0.7.0-4, =0.6.9-1
    • (no CPE)range: 0
  • osv-coords
    pkg:rpm/opensuse/velociraptor&distro=openSUSE%20Tumbleweed
    Range: < 0.7.0.4.git74.3426c0a-5.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.