CVE-2023-31299

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Dec 29, 2023
Updated: Jan 8, 2024
CWE ID 79

Summary

CVE-2023-31299 is a Cross Site Scripting (XSS) vulnerability found in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6, allowing remote attackers to execute arbitrary code through the Barcode field of a container. The vulnerability has a base severity rating of MEDIUM with a base score of 6.1. It requires user interaction and has low integrity and confidentiality impacts. The exploitability score is 2.8, and the attack vector is through the network. The vulnerability poses a potential danger to organizations using the affected software as it can be exploited to execute arbitrary code, potentially leading to unauthorized access or data manipulation. It is recommended that organizations using CPTO version 6.3.8.6 update to a patched version or apply any available security patches to remediate this vulnerability and mitigate the risk it poses.

Note: The provided information is based on the available data without including any analysis or opinions from the source text provided in the question prompt.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-31299 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options