CVE-2023-48466

Summary

CVE-2023-48466 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue is DOM-based, meaning it exploits vulnerabilities in the way a web application handles data within the browser. An attacker could manipulate a URL leading to a vulnerable page, potentially injecting malicious JavaScript code that runs within the victim's browser context. Successful exploitation enables the attacker to carry out various actions, including data theft or unauthorized website control. Users are advised to update their Adobe Experience Manager installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.