CVE-2023-34977

Summary

CVE-2023-34977 is a newly discovered cross-site scripting (XSS) vulnerability that affects Video Station. This issue allows authenticated users to inject malicious code into the application via a network. Successful exploitation could lead to unintended execution of malicious scripts, potentially compromising the affected system. The vulnerability has been addressed in Video Station version 5.7.0, released on July 27, 2023, and later. It is recommended that all users update their Video Station installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.