CVE-2023-25835

Summary

CVE-2023-25835 is a stored Cross-site Scripting (XSS) vulnerability affecting Esri Portal for ArcGIS Enterprise Sites versions 10.8.1 to 11.1. An authenticated attacker can exploit this flaw by creating a malicious link and storing it in the site configuration. Upon clicking the link, victims' browsers may execute arbitrary JavaScript code, leading to potential data theft, website defacement, or other malicious activities. The required attacker privileges are high, and the impact on Confidentiality, Integrity, and Availability is also considered high.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.