CVE-2023-0338

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-03399.8Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects AccesCVE-2023-03408.8The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate one of its shortcode attribute, which could allow users with aCVE-2023-03417.8A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write CVE-2023-03425.3MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files tCVE-2023-03437.5Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an CVE-2023-03447.5Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the CVE-2023-03459.8The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password cannot be changed by the CVE-2023-03467.5Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if CVE-2023-03475.3The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker toCVE-2023-03487.5Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device wiCVE-2023-03499.1The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to vCVE-2023-03506.5Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the
CVE-2023-0338: Medium severity, CVSS 6.1 | Vulnix