{"id":"CVE-2023-5556","summary":"Cross-site Scripting (XSS) - Reflected in structurizr/onpremises","details":"Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194.","modified":"2026-08-12T03:51:41.216917647Z","published":"2023-10-12T10:32:21.114Z","database_specific":{"cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5556.json","cna_assigner":"@huntrdev"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/a3ee0f98-6898-41ae-b1bd-242a03a73d1b"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5556.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5556"},{"type":"FIX","url":"https://github.com/structurizr/onpremises/commit/6cff4f792b010dfb1ff6a0b4ae1c6e398f8f8a18"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/structurizr/onpremises","events":[{"introduced":"0"},{"fixed":"6cff4f792b010dfb1ff6a0b4ae1c6e398f8f8a18"}],"database_specific":{"cpe":"cpe:2.3:a:structurizr:on-premises_installation:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3194"}],"source":["AFFECTED_FIELD","CPE_RANGE","REFERENCES"]}}],"versions":["v3192","v3142","v3140","v3138","v3137","v3130","v3124","v3123","v3122","v3121","v3115","v3114","v3112","v3107","v3104","v3102","v3101","v3100","v3099","v3098","v3097","v3093","v3092","v3091","v3090","v3088","v3087","v3085","v3084","v3082","v3081","v3080","v3079","v3078","v3077","v3076","v3075","v3074","v3073","v3072","v3071","v3070","v3069","v3068","v3067","v3066","v3064","v3063","v3062","v3061","v3060","v3059","v3058","v3057","v3056","v3055","v3054","v3053","v3052","v3051","v3050","v3047","v3045","v3044","v3043","v3042","v3041","v3040","v3039","v3038","v3037","v3036","v3035","v3034","v3033","v3032","v3030","v3029","v3028","v3027","v3026","v3025","v3023","v3022","v3021","v3020","v3019","v3018","v3017","v3016","v3015","v3014","v3012","v3011","v3010","v3008","v3007","v3006","v3005","v3004","v3002","v3001","v3000","v2999","v2998","v2997","v2996","v2995","v2994","v2993","v2992","v2991","v2990","v2989","v2988","v2987","v2986","v2984","v2983","v2982","v2981","v2980","v2979","v2978","v2977","v2976","v2974","v2973","v2972","v2971","v2970","v2969","v2968","v2967","v2966","v2965","v2964","v2963","v2962","v2961","v2960","v2959","v2958","v2957","v2956","v2955","v2954","v2953","v2952","v2951","v2950","v2949","v2948","v2947","v2946","v2945","v2944","v2943","v2942"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5556.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}