PT-2023-25842 · Rsa · Archer Platform

Publicado 2023-07-14 · Atualizado 2023-07-26 · CVE-2023-37223

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6

Description The issue is a Cross Site Scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.

Recommendations For Archer Platform versions prior to 6.13, update to version 6.13 or later. For Archer Platform version 6.12.0.6, no additional action is required as this version is mentioned as fixed.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-37223

Produtos afetados

Archer Platform

Referências · 5

• https://t.me/cibsecurity/66752 · Publicação no Telegram
• https://archerirm.com · Nota
• https://osv.dev/vulnerability/CVE-2023-37223 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37223 · Nota de Segurança
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Aviso do Fabricante