CVE-2023-6011

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DECE Software Geodi allows Stored XSS.

This issue affects Geodi: before 8.0.0.27396.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-60129.8An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could leCVE-2023-60135.4H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.CVE-2023-60149.8An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.CVE-2023-60157.5MLflow allowed arbitrary files to be PUT onto the server.CVE-2023-60169.8An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.CVE-2023-60177.1H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.CVE-2023-60189.8An attacker can overwrite any file on the server hosting MLflow without any authentication.CVE-2023-60199.8A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashbCVE-2023-60207.5LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.CVE-2023-60217.5LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. CVE-2023-60228.8Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.CVE-2023-60237.5An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
CVE-2023-6011: Medium severity, CVSS 5.4 | Vulnix