VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Nov 8, 2023· Updated Jun 17, 2026

CVE-2023-6002

CVE-2023-6002

Description

YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Yugabytedb/Yugabytedb3 versions
    cpe:2.3:a:yugabyte:yugabytedb:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:yugabyte:yugabytedb:*:*:*:*:*:*:*:*range: >=2.14.0.0,<2.14.14.0
    • (no CPE)
    • (no CPE)range: 2.0.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.