CVE-2023-33276

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).

• CWE-79

• https://www.syss.de/en/responsible-disclosure-policyNot Applicable
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-016.txtExploit, Third Party Advisory
• https://www.syss.de/en/responsible-disclosure-policyNot Applicable
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-016.txtExploit, Third Party Advisory

Published

Jun 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3327Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-33270An issue was discovered in DTS Monitoring 3.57.0. The parame…9.8
• CVE-2023-33271An issue was discovered in DTS Monitoring 3.57.0. The parame…9.8
• CVE-2023-33272An issue was discovered in DTS Monitoring 3.57.0. The parame…9.8
• CVE-2023-33273An issue was discovered in DTS Monitoring 3.57.0. The parame…9.8
• CVE-2023-33274The authentication mechanism in PowerShield SNMP Web Pro 1.1…9.8
• CVE-2023-33277The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.…7.5
• CVE-2023-33278In the Store Commander scexportcustomers module for PrestaSh…9.8
• CVE-2023-33279In the Store Commander scfixmyprestashop module through 2023…9.8
• CVE-2023-3328The Custom Field For WP Job Manager WordPress plugin before …4.8
• CVE-2023-33280In the Store Commander scquickaccounting module for PrestaSh…9.8
• CVE-2023-33281The remote keyfob system on Nissan Sylphy Classic 2021 sends…6.5