{"id":"CVE-2023-40819","aliases":["EUVD-2023-45362","GHSA-4r77-5qxj-vjjj"],"status":"published","title":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response,...","description":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00312,"percentile":0.24362,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-233","CWE-79"],"published":"2024-08-06T00:00:00Z","modified":"2026-06-17T06:19:36Z","products":[{"vendor":"devlop.systems","product":"id4portais"},{"vendor":"id4software","product":"id4portais"}],"references":[{"url":"https://www.id4software.com/","tags":["Broken Link"]},{"url":"https://miguelsantareno.github.io/id4Portais.txt","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40819"},{"url":"https://www.id4software.com"},{"url":"https://github.com/advisories/GHSA-4r77-5qxj-vjjj"}],"sources":{"cve":[{"id":"CVE-2023-40819","description":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.","status":"published","published":"2024-08-06T00:00:00Z","modified":"2024-08-07T15:47:04.958Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-233"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45362","description":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.","status":"published","published":"2024-08-06T00:00:00Z","modified":"2024-08-07T15:47:04Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T01:16:14.824022Z"}],"ghsa":[{"id":"GHSA-4r77-5qxj-vjjj","title":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response,...","description":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.","status":"published","published":"2024-08-06T15:30:54Z","modified":"2024-08-12T18:31:53Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79","CWE-233"],"updated_at":"2026-11-02T14:57:55.768435Z"}],"nvd":[{"id":"CVE-2023-40819","description":"ID4Portais in version \u003c V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.","status":"published","published":"2024-08-06T14:16:03.38Z","modified":"2026-06-17T06:19:36.347Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79","CWE-233"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}