CVE-2023-32193
Norman API Cross-site Scripting Vulnerability
A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely.
CVSS 3.1 · 8.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products