PT-2023-20656 · Pegasystems · Pega Platform

Adam Simuntis + 1 · Publicado 2023-06-09 · Atualizado 2023-06-16 · CVE-2023-26465

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pega Platform versions 7.2 through 8.8.1

Description The issue is related to an XSS problem.

Recommendations For Pega Platform versions 7.2 through 8.8.1, update to a version that includes a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-26465

Produtos afetados

Pega Platform

Referências · 3

• https://support.pega.com/support-doc/pega-security-advisory-a23-vulnerability-remediation-note · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-26465 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-26465 · Nota de Segurança