CVE-2023-51843

Summary

CVE-2023-51843 represents a Cross-Site Scripting (XSS) vulnerability affecting the react-dashboard library in version 1.4.0. This issue arises due to the lack of setting the httpOnly flag, leaving the application susceptible to malicious scripts being injected through user inputs. Attackers can exploit this weakness to steal sensitive data from users or manipulate their browser sessions. To mitigate this risk, it is strongly recommended that users update to a patched version of the library as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.