Skip to content
Sign in
8.3 High

CVE-2023-32193 A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint…

Description

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely.

Affected products and versions

Product Affected versions Fixed in
norman 0.0 earliest → < 0.0.0-20240207153100-3bb70b772b52 0.0.0-20240207153100-3bb70b772b52
norman 0.0 earliest → < 0.0.0-20240207153100-3bb70b772b52 0.0.0-20240207153100-3bb70b772b52
Track this CVE