Search vulnerabilities

Results 1

Export CSV
CVE-2023-32193

Norman API Cross-site Scripting Vulnerability

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Products