CVE-2023-49258

Summary

CVE-2023-49258 is a newly disclosed cross-site scripting (XSS) vulnerability. Hackers can exploit this issue by forcing users to execute unwanted JavaScript code through the "/gui/terminal_tool.cgi" page, located in the "data" parameter. Successful attacks may result in the theft of authentication cookies, allowing unauthorized access to affected systems. Users are strongly advised to update their software to patch this vulnerability and practice safe browsing habits to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.