CVE-2023-38971

Summary

CVE-2023-38971 is a Cross-Site Scripting (XSS) vulnerability affecting Badaso versions 0.0.1 to 2.9.7. An attacker can exploit this flaw by injecting malicious code into the rack number parameter during the "add new rack" function. Successful exploitation allows the attacker to execute arbitrary code in the user's browser, potentially leading to unauthorized actions or data theft. Users are advised to update their Badaso installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.