CVE-2023-4090

Summary

CVE-2023-4090 is a newly identified cross-site scripting (XSS) vulnerability affecting WideStand up to version 5.3.5. This issue arises due to the software's practice of generating one of its meta tags directly from the content of the queried URL, allowing an attacker to inject malicious HTML/JavaScript code into the response. Successful exploitation of this flaw can lead to code execution in the context of the vulnerable application, posing a significant risk to users. To mitigate this issue, users are strongly advised to upgrade to the latest WideStand version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.