CVE-2023-4393 MEDIUM

CVE-2023-4393: HTML and SMTP Injection in LiquidFiles

Vendor Liquidfiles Pty Ltd

Product LiquidFiles

Weakness CWE-116

Published October 29, 2023

Last update September 25, 2024

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

Key dates

02Disclosure timeline

October 29, 2023 CVE published

September 25, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4393 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/116.html

Related vulnerabilities

CVE-2023-4393: HTML and SMTP Injection in LiquidFiles

01Description

02Disclosure timeline

03References

04Related CVE