CVE-2023-48568

Summary

CVE-2023-48568 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and older. This DOM-based XSS issue allows malicious JavaScript code to be executed within a victim's browser if they visit a specially crafted URL referencing a vulnerable page. An attacker with low privileges can exploit this vulnerability to conduct various malicious activities, including data theft or session hijacking. It is essential for organizations using the affected Adobe Experience Manager versions to apply the necessary patches as soon as possible to mitigate the risk of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.