Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-36816

Cross-Site Scripting (XSS) at Account creation in 2FAuth

Description

2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the account/service field. This was tested in docker-compose environment. This vulnerability has been patched in version 4.0.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bubka 2FAuth

  • < 4.0.3affected

References