{"vulnerability": "CVE-2023-39612", "sightings": [{"uuid": "e3780c58-f7c7-47c2-acfa-8b524cbb8d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39612", "type": "seen", "source": "https://t.me/cibsecurity/70627", "content": "\u203c CVE-2023-39612 \u203c\n\nA cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a crafted HTML file or URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-16T07:26:03.000000Z"}, {"uuid": "0358c045-5d13-4599-af47-0ff597126834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39612", "type": "seen", "source": "https://t.me/hacking_Attack/119835", "content": "CVE-2023\u201339612: CSP bypasss + XSS to achieve Admin Account Takeover + Remote Command Execution in\u2026\nhttps://febinj.medium.com/cve-2023-39612-csp-bypasss-xss-to-achieve-admin-account-takeover-remote-command-execution-in-b0488dce64ec?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:47.304412Z"}, {"uuid": "ff81b9bb-5a67-421b-be46-a4864d646f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39612", "type": "seen", "source": "https://t.me/hacking_Attack/119837", "content": "My 5th CVE: CVE-2023\u201339612Continue reading on Medium \u00bb (https://febinj.medium.com/cve-2023-39612-csp-bypasss-xss-to-achieve-admin-account-takeover-remote-command-execution-in-b0488dce64ec?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:47.354404Z"}, {"uuid": "89844f6f-67c1-462f-9df1-84cfb3e9a8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39612", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119837", "content": "My 5th CVE: CVE-2023\u201339612Continue reading on Medium \u00bb (https://febinj.medium.com/cve-2023-39612-csp-bypasss-xss-to-achieve-admin-account-takeover-remote-command-execution-in-b0488dce64ec?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T04:00:06.337573Z"}, {"uuid": "2f6a7e34-63cf-4110-81e5-15b324057f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39612", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119835", "content": "CVE-2023\u201339612: CSP bypasss + XSS to achieve Admin Account Takeover + Remote Command Execution in\u2026\nhttps://febinj.medium.com/cve-2023-39612-csp-bypasss-xss-to-achieve-admin-account-takeover-remote-command-execution-in-b0488dce64ec?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T04:00:06.386788Z"}]}