CVE-2023-0650

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Feb 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-06519.8A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Ma CVE-2023-06527.8Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Window CVE-2023-06543.7Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker CVE-2023-06555.3SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes CVE-2023-06567.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which CVE-2023-06573.4A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow CVE-2023-06587.5A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file CVE-2023-06597.5A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.fi CVE-2023-06605.4The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputting CVE-2023-06616.5Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.CVE-2023-06627.5In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resourc CVE-2023-06639.8A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects some unknown processi