CVE-2023-45998

Summary

CVE-2023-45998 refers to a vulnerability in kodbox version 1.44. This issue allows for Cross-Site Scripting (XSS) attacks, which can inject malicious scripts into a web page viewed by other users. Such scripts can steal sensitive information, install malware, or carry out other malicious actions. The vulnerability stems from the application's failure to properly sanitize user-supplied custom HTML globally, leading to the storage of malicious scripts. Users are advised to upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.