Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-23383

Service Fabric Explorer Spoofing Vulnerability

CVSS 8.2 · HighBuzz score 27.6

Buzz score

Why this CVE is surfacing

Buzz score total 27.6

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 16.1 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
16.1
4 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
4 source links · newest first
  • 3rd April – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 3rd April, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHES Both Windows and macOS versions of 3CXDesktopApp, a VoIP application of 3CX Communications Company, were compromised and used to distribute Trojanized versions in a large-scale supply chain attack. In this widespread campaign, dubbed […]

    vendorresearch.checkpoint.comApr 3, 2023, 3:11 PM
  • Security Affairs newsletter Round 413 by Pierluigi Paganini – International editionSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. LockBit leaks data stolen from the South Korean National Tax Service Italy’s Data Protection Authority […]

    newssecurityaffairs.comApr 2, 2023, 3:10 PM
  • Severe Azure Vulnerability Led to Unauthenticated Remote Code ExecutionSecurityWeek

    A high-severity vulnerability in Azure Service Fabric Explorer could have allowed a remote, unauthenticated attacker to execute arbitrary code.

    newswww.securityweek.comMar 31, 2023, 8:45 AM
  • Super FabriXss vulnerability in Microsoft Azure SFX could lead to RCESecurity Affairs

    Researchers shared details about a flaw, dubbed Super FabriXss, in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution. Researchers from Orca Security shared details about a new vulnerability, dubbed Super FabriXss (CVE-2023-23383 – CVSS score: 8.2), in Azure. The experts demonstrated how to escalate a reflected XSS vulnerability in Azure Service […]

    newssecurityaffairs.comMar 30, 2023, 9:01 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-9729

    The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notification_body' parameters…

    CVSS 6.4 · Medium
    5 mentions
  • CVE-2026-9635

    The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions up to, and including…

    CVSS 6.4 · Medium
    3 mentions
  • CVE-2026-12421

    The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input san…

    CVSS 7.2 · High
    2 mentions
  • CVE-2026-7534

    The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint `/wp-json/wc-srp/v1/earning` in versions up to,…

    CVSS 7.2 · High
    2 mentions
  • CVE-2026-7232

    The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '[parameter name]' parameter in all versions up to, and including, 3.9.14 due to insufficie…

    CVSS 7.2 · High
    2 mentions
  • CVE-2026-64795

    Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visi…

    CVSS N/A · Unrated
    1 mention