CVE-2023-31928

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.0

Description A reflected cross-site scripting (XSS) issue exists in Brocade Webtools PortSetting.html that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

Recommendations For Brocade Fabric OS versions prior to 9.2.0, update to version 9.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the PortSetting.html page in Brocade Webtools to minimize the risk of exploitation.