CVE-2023-37519

Summary

CVE-2023-37519 refers to an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This issue lies in the Download Status Report feature of the BigFix Server. An attacker can inject malicious scripts into this report, which gets stored and later executed in a user's web browser when they view the report. This could potentially lead to the theft of sensitive information or unauthorized actions within the user's session.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.