CVE-2023-5052: Uniform Server Zero

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

vulnerability in Uniform Server Zero, version 10.2.5, consisting of an XSS through the /us_extra/phpinfo.php page. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and partially take over their session details.

Affected products

• Uniform Server Zero Uniform Server Zero: version 10.2.5 only

Published 2024-05-14. Last modified 2026-06-17.