CVE-2023-4592

Summary

CVE-2023-4592 is a newly identified Cross-Site Scripting (XSS) vulnerability that affects WPN-XM Serverstack version 0.8.6. Maliciously crafted JavaScript code can be transmitted through the /tools/webinterface/index.php parameter, enabling an attacker to retrieve the cookie session details of authenticated users. This vulnerability poses a significant risk, potentially leading to session hijacking. Attackers can exploit this weakness to gain unauthorized access to user accounts and sensitive information. Users are advised to upgrade to a patched version of WPN-XM Serverstack as soon as possible to mitigate this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.