[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-5950":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-04T03:50:50.655Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":46,"downstream":47,"duplicates":50,"related":51,"reserved_at":9,"published_at":53,"modified_at":54,"state":55,"summary":56,"references_raw":65,"kevs":72,"epss":73,"epss_history":76,"metrics":338,"affected":351},"CVE-2023-5950","Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user's web browser. This vulnerability is fixed in version 0.7.0-04 and a patch is available to download. Patches are also available for version 0.6.9 (0.6.9-1).\n\n",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[],[],[48],{"_key":49},"OPENSUSE-SU-2024:13830-1",[],[52],{"_key":49},"2023-11-06T14:30:28.972Z","2024-09-05T13:42:38.581Z","Modified",{"cisa_kev":57,"cisa_ransomware":57,"cisa_vendor":9,"epss_severity":58,"epss_score":59,"severity":60,"severity_score":61,"severity_version":62,"severity_source":63,"severity_vector":64,"severity_status":55},false,"low",0.00465,"high",8.6,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",[66],{"url":67,"sources":68,"tags":70},"https://github.com/Velocidex/velociraptor/releases/tag/v0.7.0",[63,69],"nvd",[71],"Release Notes",[],{"date":74,"score":59,"percentile":75},"2026-09-03",0.38583,[77,81,84,87,90,93,96,99,102,105,107,110,113,116,119,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,268,271,274,277,280,283,285,288,290,293,296,299,302,305,307,310,313,316,319,321,324,326,328,330,333,335],{"date":78,"score":79,"percentile":80},"2025-11-04",0.00063,0.19642,{"date":82,"score":79,"percentile":83},"2025-11-05",0.1965,{"date":85,"score":79,"percentile":86},"2025-11-06",0.19653,{"date":88,"score":79,"percentile":89},"2025-11-07",0.19663,{"date":91,"score":79,"percentile":92},"2025-11-08",0.19667,{"date":94,"score":79,"percentile":95},"2025-11-09",0.19639,{"date":97,"score":79,"percentile":98},"2025-11-10",0.19595,{"date":100,"score":79,"percentile":101},"2025-11-11",0.19596,{"date":103,"score":79,"percentile":104},"2025-11-12",0.1964,{"date":106,"score":79,"percentile":89},"2025-11-13",{"date":108,"score":79,"percentile":109},"2025-11-14",0.19657,{"date":111,"score":79,"percentile":112},"2025-11-15",0.19625,{"date":114,"score":79,"percentile":115},"2025-11-16",0.19584,{"date":117,"score":79,"percentile":118},"2025-11-17",0.19511,{"date":120,"score":121,"percentile":122},"2025-11-18",0.00402,0.58075,{"date":124,"score":121,"percentile":125},"2025-11-19",0.58091,{"date":127,"score":121,"percentile":128},"2025-11-20",0.58081,{"date":130,"score":79,"percentile":131},"2025-11-21",0.19505,{"date":133,"score":79,"percentile":134},"2025-11-22",0.19506,{"date":136,"score":79,"percentile":137},"2025-11-23",0.19475,{"date":139,"score":79,"percentile":140},"2025-11-24",0.19439,{"date":142,"score":79,"percentile":143},"2025-11-25",0.19432,{"date":145,"score":79,"percentile":146},"2025-11-26",0.19424,{"date":148,"score":79,"percentile":149},"2025-11-27",0.19421,{"date":151,"score":79,"percentile":152},"2025-11-28",0.19405,{"date":154,"score":79,"percentile":155},"2025-11-29",0.19395,{"date":157,"score":79,"percentile":158},"2025-11-30",0.19401,{"date":160,"score":79,"percentile":161},"2025-12-01",0.19445,{"date":163,"score":79,"percentile":164},"2025-12-02",0.19469,{"date":166,"score":79,"percentile":167},"2025-12-03",0.19485,{"date":169,"score":79,"percentile":161},"2025-12-04",{"date":171,"score":79,"percentile":172},"2025-12-05",0.19494,{"date":174,"score":79,"percentile":175},"2025-12-06",0.19499,{"date":177,"score":79,"percentile":178},"2025-12-07",0.19487,{"date":180,"score":79,"percentile":181},"2025-12-08",0.19507,{"date":183,"score":79,"percentile":184},"2025-12-09",0.19574,{"date":186,"score":79,"percentile":187},"2025-12-10",0.19645,{"date":189,"score":79,"percentile":190},"2025-12-11",0.19686,{"date":192,"score":79,"percentile":193},"2025-12-12",0.19713,{"date":195,"score":79,"percentile":196},"2025-12-13",0.19724,{"date":198,"score":79,"percentile":199},"2025-12-14",0.19669,{"date":201,"score":79,"percentile":202},"2025-12-15",0.19649,{"date":204,"score":79,"percentile":205},"2025-12-16",0.19683,{"date":207,"score":79,"percentile":208},"2025-12-17",0.19765,{"date":210,"score":79,"percentile":211},"2025-12-18",0.19854,{"date":213,"score":79,"percentile":214},"2025-12-19",0.19874,{"date":216,"score":79,"percentile":217},"2025-12-20",0.19845,{"date":219,"score":79,"percentile":220},"2025-12-21",0.19802,{"date":222,"score":79,"percentile":223},"2025-12-22",0.19756,{"date":225,"score":79,"percentile":226},"2025-12-23",0.19759,{"date":228,"score":79,"percentile":229},"2025-12-24",0.19797,{"date":231,"score":79,"percentile":232},"2025-12-25",0.19875,{"date":234,"score":79,"percentile":235},"2025-12-26",0.19869,{"date":237,"score":79,"percentile":238},"2025-12-27",0.1987,{"date":240,"score":79,"percentile":241},"2025-12-28",0.19826,{"date":243,"score":79,"percentile":244},"2025-12-29",0.19781,{"date":246,"score":79,"percentile":247},"2025-12-30",0.1977,{"date":249,"score":79,"percentile":250},"2025-12-31",0.19829,{"date":252,"score":79,"percentile":253},"2026-01-01",0.19924,{"date":255,"score":79,"percentile":256},"2026-01-02",0.19929,{"date":258,"score":79,"percentile":259},"2026-01-03",0.19909,{"date":261,"score":79,"percentile":262},"2026-01-04",0.19809,{"date":264,"score":79,"percentile":265},"2026-01-05",0.19784,{"date":267,"score":79,"percentile":229},"2026-01-06",{"date":269,"score":79,"percentile":270},"2026-01-07",0.19828,{"date":272,"score":79,"percentile":273},"2026-01-08",0.19884,{"date":275,"score":79,"percentile":276},"2026-01-09",0.19887,{"date":278,"score":79,"percentile":279},"2026-01-10",0.19899,{"date":281,"score":79,"percentile":282},"2026-01-11",0.19863,{"date":284,"score":79,"percentile":241},"2026-01-12",{"date":286,"score":79,"percentile":287},"2026-01-13",0.198,{"date":289,"score":79,"percentile":282},"2026-01-14",{"date":291,"score":79,"percentile":292},"2026-01-15",0.19867,{"date":294,"score":79,"percentile":295},"2026-01-16",0.19893,{"date":297,"score":79,"percentile":298},"2026-01-17",0.19908,{"date":300,"score":79,"percentile":301},"2026-01-18",0.19864,{"date":303,"score":79,"percentile":304},"2026-01-19",0.19818,{"date":306,"score":79,"percentile":287},"2026-01-20",{"date":308,"score":79,"percentile":309},"2026-01-21",0.19767,{"date":311,"score":79,"percentile":312},"2026-01-22",0.19712,{"date":314,"score":79,"percentile":315},"2026-01-23",0.1981,{"date":317,"score":79,"percentile":318},"2026-01-24",0.19833,{"date":320,"score":79,"percentile":226},"2026-01-25",{"date":322,"score":79,"percentile":323},"2026-01-26",0.19661,{"date":325,"score":79,"percentile":109},"2026-01-27",{"date":327,"score":79,"percentile":109},"2026-01-28",{"date":329,"score":79,"percentile":112},"2026-01-29",{"date":331,"score":79,"percentile":332},"2026-01-30",0.19634,{"date":334,"score":79,"percentile":95},"2026-01-31",{"date":336,"score":79,"percentile":337},"2026-02-01",0.19664,[339,344],{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":340,"cvss_v4_0":9},{"baseScore":61,"baseSeverity":341,"vectorString":64,"impactScore":342,"exploitabilityScore":343},"HIGH",7.8,10,{"source":69,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":345,"cvss_v4_0":9},{"baseScore":346,"baseSeverity":347,"vectorString":348,"impactScore":349,"exploitabilityScore":350},6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",4.5,7.2,[352],{"ecosystem":9,"name":353,"vendor":354,"product":355,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":357},"Velociraptor","rapid7","velociraptor","a",[358,363,367,369,371],{"version":359,"is_range":360,"range_type":63,"version_start":9,"version_start_type":9,"version_end":361,"version_end_type":362,"fixed_in":9},"\u003C 0.7.0-4",true,"0.7.0-4","excluding",{"version":364,"is_range":360,"range_type":365,"version_start":9,"version_start_type":9,"version_end":366,"version_end_type":362,"fixed_in":9},"lt0.6.9-1","cpe","0.6.9-1",{"version":368,"is_range":57,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.7.0",{"version":370,"is_range":57,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.7.0:rc1",{"version":372,"is_range":57,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.7.0-3"]