CVE-2023-4594
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-4594 is a stored XSS vulnerability that affects the MailAdmin_dll.htm file. An attacker can exploit this issue by injecting malicious JavaScript code via GET and POST methods on multiple parameters in this file. Successful exploitation could lead to unintended execution of the attacker's code in the user's browser, potentially compromising their session or stealing sensitive information. This vulnerability poses a significant risk to users who visit compromised websites or interact with malicious emails. It is recommended that affected systems are patched as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions