CVE-2023-45757

Summary

CVE-2023-45757 is a security vulnerability affecting Apache bRPC versions 1.6.0 and below, impacting all platforms. The issue allows attackers to inject Cross-Site Scripting (XSS) code into the built-in rpcz page by sending a crafted HTTP request to the bRPC server with the rpcz feature enabled. To mitigate the risk, users can upgrade to bRPC version 1.6.1, apply the patch available at <https://github.com/apache/brpc/pull/2411>, or disable the rpcz feature.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.