VULNERABILITY INTELLIGENCE

CVE-2023-36816

CVSS score6.1 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2023-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Description

2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the account/service field. This was tested in docker-compose environment. This vulnerability has been patched in version 4.0.3.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references