CVE-2023-50473

Published December 21st, 2023

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Cross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information via fixed session identifiers (SID) in index.js file.

bill-ahmed/qbit-matUI

A material WebUI for qBittorrent, written in Angular.

GitHub

348

tianjk99/Cryptographic-Misuses

GitHub