CVE-2023-28873

Summary

CVE-2023-28873 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting Seafile's wiki and discussion pages in version 9.0.6. Malicious actors can exploit this flaw to inject JavaScript code into the Markdown editor, potentially stealing user data or taking control of their sessions. Attackers may entice victims to click on a specially crafted link or insert the malicious script into a wiki or discussion post. This issue poses a significant risk to users who frequently interact with these features on Seafile's platform. To mitigate this risk, it is recommended that users upgrade to the latest version of Seafile as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.