What’s Vulnerable › Vulnerabilities

CVE-2023-3034: Reflected XSS in BKG Ntrip Professional Caster version <=2.0.44

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-28 · updated 2026-06-17
• Weakness: CWE-20

Description

Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44

Affected products

• BKG NTRIP Professional Caster: through 2.0.44

References

• https://igs.bkg.bund.de/ntrip/bkgcaster
• https://igs.bkg.bund.de/root_ftp/NTRIP/software/NTRIPCASTER_CHANGELOG
• https://igs.bkg.bund.de/ntrip/bkgcaster
• https://igs.bkg.bund.de/root_ftp/NTRIP/software/NTRIPCASTER_CHANGELOG

Get alerted when CVE-2023-3034 or the next vulnerability affects your stack