CVE-2023-30958CWE-83

DOM XSS in Developer mode dashboard via redirect GET parameter

Medium · published August 3, 2023

CVSS v3.1
4.7
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed.

This defect was resolved with the release of Foundry Frontend 6.225.0.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 32.9th percentile
Weakness
CWE-83 · Improper Neutralization of Script in Attributes in a Web Page
Published
2023-08-03T21:09Z
EPSS history
Timeline
  • 03 AUG 21:09Z
    DOM XSS in Developer mode dashboard via redirect GET parameter
    cvelistv5