CVE-2023-4167

Summary

CVE-2023-4167 is a newly disclosed vulnerability affecting Media Browser Emby Server version 4.7.13.0. This issue involves processing of the /web/ file, which can be exploited to carry out cross-site scripting attacks. The vulnerability can be exploited remotely, allowing an attacker to inject malicious code into a victim's web browser. As of now, the exploit has been made public, increasing the risk for potential attacks. To mitigate this risk, it is strongly recommended that affected users upgrade their Media Browser Emby Server component as soon as possible. The associated identifier for this vulnerability is VDB-236183.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.