CVE-2023-39712

Summary

CVE-2023-39712 is a cross-site scripting (XSS) vulnerability found in Free and Open Source Inventory Management System v1.0. This vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the parameters for Name, Address, and Company under the Add New Put section. The affected products are t0IlHJ. To remediate this vulnerability, it is recommended to update the Free and Open Source Inventory Management System to a patched version that addresses the XSS vulnerabilities. This vulnerability poses a medium level of danger to organizations as it can be exploited remotely over a network without requiring any privileges, and it could lead to the compromise of confidentiality and integrity of data on affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.