Added |
CPE Configuration |
|
OR
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 3.3.0 up to (excluding) 5.3.10
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 7.0.0 up to (excluding) 7.0.9
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 7.1.0 up to (excluding) 7.1.7
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 7.2.0 up to (excluding) 7.2.6
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 7.3.0 up to (excluding) 7.3.4
*cpe:2.3:a:neos:neos_cms:*:*:*:*:*:*:*:* versions from (including) 8.0.0 up to (excluding) 8.0.2
|
Added |
CVSS V2 |
|
NIST (AV:N/AC:M/Au:S/C:N/I:P/A:N)
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|
Added |
CVSS V3.1 |
|
NIST AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
Added |
CWE |
|
NIST CWE-79
|
Changed |
Reference Type |
https://it-sec.de/unbekannte-schwachstellen-in-neos-cms/ No Types Assigned
|
https://it-sec.de/unbekannte-schwachstellen-in-neos-cms/ Exploit, Third Party Advisory
|
Changed |
Reference Type |
https://www.neos.io/blog/xss-in-various-backend-modules.html No Types Assigned
|
https://www.neos.io/blog/xss-in-various-backend-modules.html Vendor Advisory
|