CVE-2023-4951

Summary

CVE-2023-4951 is a cross-site scripting (XSS) vulnerability affecting the pagination function on the "Client-based Authentication Policy Configuration" screen of the GreenRADIUS web admin interface. This issue is present in GreenRADIUS versions 5.1.1.1 and prior. An attacker could exploit this vulnerability to inject malicious scripts into a user's browser, potentially stealing sensitive information or taking control of their account. The vulnerability was patched in GreenRADIUS version 5.1.2.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.