CVE-2023-25836

Summary

CVE-2023-25836 is a Cross-site Scripting (XSS) vulnerability affecting Esri Portal Sites in versions 10.8.1 through 10.9. A remote, authenticated attacker can create malicious links that, when clicked, may execute arbitrary JavaScript code in the victim's browser. This issue grants the attacker limited privileges and poses a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.