PT-2024-21102 · Esri · Esri Portal For Arcgis Experience Builder
CVE-2024-25705
·
Published
2024-04-04
·
Updated
2026-02-13
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Esri Portal for ArcGIS Experience Builder versions 11.1 and below
Description
The issue allows a remote, unauthenticated attacker to create a crafted link which, when clicked, could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are low.
Recommendations
For Esri Portal for ArcGIS Experience Builder versions 11.1 and below, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Esri Portal For Arcgis Experience Builder