CVE-2023-4710

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Sep 1, 2023
Updated: Jun 4, 2024
CWE ID 770

Summary

CVE-2023-4710 is a newly identified vulnerability in TOTVS RM 12.1's Portal component. This issue, classified as problematic, allows an attacker to execute cross-site scripting by manipulating an argument labeled 'd'. The vulnerability can be exploited remotely. No response was received from the vendor regarding disclosure of this issue, which has been assigned identifier VDB-238573. This vulnerability poses a significant risk, as it enables attackers to inject malicious code into unsuspecting users' browsers.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share