PT-2023-25844 · Pexip · Pexip Infinity

CVE-2023-37225 · Publicado 2023-12-25 · Atualizado 2023-12-29

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 32

Description The issue allows for Webapp1 XSS via preconfigured links.

Recommendations For versions prior to 32, update to version 32 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-37225

Produtos afetados

Pexip Infinity

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-37225 · Nota de Segurança
• https://docs.pexip.com/admin/security_bulletins.htm · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-37225 · Aviso do Fabricante
• https://t.me/cvenotify/65085 · Publicação no Telegram