CVE-2023-46448

State: Published
Severity: 6.1 Medium
Published: Nov 1, 2023
Updated: Sep 12, 2024
Reserved: Oct 23, 2023

Description

Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R	mitre

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/dmpop/mejiro/commit/309639339f5816408865902befe8c90cb6862537
https://blog.0xzon.dev/2023-10-15-Mejiro-Reflected-XSS-Via-Remote-File-Inclusion-CVE-2023-46448/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.