PT-2023-7855
CVE-2023-48490
·
تاريخ النشر
2023-12-12
·
تاريخ التحديث
2023-12-18
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Adobe Experience Manager versions 6.5.18 and earlier
Description
The issue is related to a Cross-site Scripting (DOM-based XSS) vulnerability. It may allow a low-privileged attacker to execute malicious JavaScript content within the context of a victim's browser if the victim visits a URL referencing a vulnerable page. The vulnerability is also described as related to the lack of protection of the web page structure, which could allow a remote attacker to execute arbitrary code.
Recommendations
For Adobe Experience Manager versions 6.5.18 and earlier, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾