Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-49078 Details

Description

raptor-web is a CMS for game server communities that can be used to host information and keep track of players. In version 0.4.4 of raptor-web, it is possible to craft a malicious URL that will result in a reflected cross-site scripting vulnerability. A user controlled URL parameter is loaded into an internal template that has autoescape disabled. This is a cross-site scripting vulnerability that affects all deployments of `raptor-web` on version `0.4.4`. Any victim who clicks on a malicious crafted link will be affected. This issue has been patched 0.4.4.1.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/zediious/raptor-web/releases/tag/0.4.4.1 CVEPatch
https://github.com/zediious/raptor-web/security/advisories/GHSA-8r6g-fhh4-xhmq CVEExploitPatchVendor Advisory
https://github.com/zediious/raptor-web/releases/tag/0.4.4.1 [email protected]Patch
https://github.com/zediious/raptor-web/security/advisories/GHSA-8r6g-fhh4-xhmq [email protected]ExploitPatchVendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')[email protected]

Affected Products

ProductVersions
zediious raptor-web
0.4.4

CPE

  • cpe:2.3:a:zediious:raptor-web:0.4.4:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-49078
NVD Published Date:
Nov 28, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-49078 Details - Not Deferred