« Volver al listado

CVE-2023-39067

Estado: ModificadaMedia (6.1)—

Vulnerabilidad de Cross Site Scripting en ZLMediaKiet v.4.0 y v.5.0 permite a un atacante ejecutar código arbitrario a través de un script manipulado en la URL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zlmediakit — Zlmediakit

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-39067",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-39067",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-26T17:42:31.038747Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-09-11T18:15:10.223",
  "references": [
    {
      "url": "https://github.com/Yao-ruo/CVE-FIND/blob/main/CVE-2023-39067",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Yao-ruo/CVE-ZLMediaKit/blob/main/README.md",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Yao-ruo/CVE-FIND/blob/main/CVE-2023-39067",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/Yao-ruo/CVE-ZLMediaKit/blob/main/README.md",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Cross Site Scripting en ZLMediaKiet v.4.0 y v.5.0 permite a un atacante ejecutar código arbitrario a través de un script manipulado en la URL."
    }
  ],
  "lastModified": "2026-06-17T06:11:33.497",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zlmediakit:zlmediakit:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73F0E409-1888-47BF-B1FE-2CFD1610C7BD"
            },
            {
              "criteria": "cpe:2.3:a:zlmediakit:zlmediakit:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D867AE9C-CBFC-41EA-BD3C-F08CE8952803"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}