CVE-2023-49111

For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "login.html". This is possible due to the request parameter "message" values being directly included in a JavaScript block in the response. This is especially critical in business environments using AD SSO authentication, e.g. via ADFS, where attackers could potentially steal AD passwords. This issue affects Kiuwan SAST: <master.1808.p685.q13371

• CWE-79

• https://r.sec-consult.com/kiuwan
• https://www.kiuwan.com/docs/display/K5/%5B2024-05-30%5D+Change+Log
• http://seclists.org/fulldisclosure/2024/Jun/3
• https://r.sec-consult.com/kiuwan
• https://www.kiuwan.com/docs/display/K5/%5B2024-05-30%5D+Change+Log

Published

Jun 20, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49106Missing Password Field Masking vulnerability in Hitachi Devi…7.5
• CVE-2023-49107Generation of Error Message Containing Sensitive Information…7.5
• CVE-2023-49108Path traversal vulnerability exists in RakRak Document Plus …8.8
• CVE-2023-49109Exposure of Remote Code Execution in Apache Dolphinscheduler…9.8
• CVE-2023-4911A buffer overflow was discovered in the GNU C Library's dyna…7.8
• CVE-2023-49110When the Kiuwan Local Analyzer uploads the scan results to t…7.2
• CVE-2023-49112Kiuwan provides an API endpoint /saas/rest/v1/info/applicat…6.5
• CVE-2023-49113The Kiuwan Local Analyzer (KLA) Java scanning application co…7.8
• CVE-2023-49114A DLL hijacking vulnerability was identified in the Qognify …6.7
• CVE-2023-49115 MachineSense devices use unauthenticated MQTT messagi…7.5
• CVE-2023-49117PowerCMS (6 Series, 5 Series, and 4 Series) contains a store…5.4
• CVE-2023-49118 in OpenHarmony v3.2.4 and prior versions allow a local atta…5.5