CVE-2023-37571

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Jan 30, 2024
Updated: Feb 5, 2024
CWE ID 79

Summary

CVE-2023-37571 is a vulnerability affecting Softing TH SCOPE versions up to 3.70. This issue permits Cross-Site Scripting (XSS) attacks, allowing malicious actors to inject malicious scripts into a victim's web browser and potentially steal sensitive information or take control of their account. An attacker could exploit this vulnerability by crafting a specially crafted URL or web page that, when visited, executes the injected script in the user's browser. Softing TH SCOPE users are strongly advised to update their software to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share