CVE-2023-22843

Name of the Vulnerable Software and Affected Versions Nozomi Guardian and Nozomi Central Management Console (CMC) (affected versions not specified)

Description An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside the definition of a Threat Intelligence rule, which will be stored and can later be executed by another legitimate user viewing the details of such a rule. This allows an attacker to perform unauthorized actions on behalf of legitimate users and/or gather sensitive information. JavaScript injection is possible in the contents for Yara rules, while limited HTML injection has been proven for packet and STYX rules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.