CVE-2023-49469

Summary

CVE-2023-49469 is a Reflected Cross Site Scripting (XSS) vulnerability affecting Shaarli version 0.12.2. This issue allows remote attackers to inject and execute arbitrary code through the search tag function. By crafting a maliciously crafted URL, an adversary can manipulate the web application to deliver malicious scripts to unsuspecting users, potentially resulting in data theft or system compromise. Users should update their Shaarli installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.