CVE-2023-3980

Summary

CVE-2023-3980 is a Cross-site Scripting (XSS) vulnerability that affects the GitHub repository omeka/omeka-s prior to version 4.0.2. The vulnerability impacts various products, including Z07aV_, sNNnel, XCy3FX, and others. To remediate the vulnerability, organizations should update their Omeka-S repository to version 4.0.2 or later. The potential danger posed by this vulnerability includes the ability for an attacker to inject malicious scripts into web pages viewed by users, leading to unauthorized access, data theft, and potential compromise of sensitive information. The severity of this vulnerability is rated as MEDIUM with a base score of 4.8 out of 10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.