CVE-2023-4382

Summary

CVE-2023-4382 is a newly identified vulnerability affecting the tdevs Hyip Rio 2.1 software. This issue resides in an unspecified feature of the Profile Settings component and the file /user/settings. Manipulation of the avatar argument can lead to cross-site scripting (XSS), making it possible for attackers to inject malicious code into unsuspecting users' browsers. This vulnerability can be exploited remotely, and no response has been received from the vendor regarding disclosure. (VDB-237314)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.