Skip to content

Cross-Site Scripting Vulnerability in User Comments

Moderate
mgeerdsen published GHSA-622w-995c-3c3h Apr 6, 2023

Package

maven io.goobi.viewer.viewer-core (Maven)

Affected versions

<23.03

Patched versions

23.03

Description

Impact

A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core. An attacker could create a specially crafted comment, resulting in the execution of malicious script code in the user's browser when displaying the comment.

Patches

The vulnerability has been fixed in version 23.03

If you have any questions or comments about this advisory:

Severity

Moderate

CVE ID

CVE-2023-29015

Weaknesses

No CWEs