CVE-2020-23065

Summary

CVE-2020-23065 is a Cross-Site Scripting (XSS) vulnerability affecting eZ Systems' eZPublish Platform version 5.4 and eZ Publish Legacy version 5.4. An authenticated attacker can exploit this weakness by injecting malicious code into the video-js.swf component, potentially gaining unauthorized access to user data or even executing arbitrary commands. This issue poses a serious security risk, and eZ Systems strongly urges users to update their platforms as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.