PT-2023-27705 · Unknown · Arconte Áurea

Jorge Alberto Palma Reyes + 1 · Publicado 2023-09-19 · Atualizado 2023-09-21 · CVE-2023-4093

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Arconte Áurea version 1.5.0.0

Description The issue is a reflected and persistent XSS vulnerability that could allow an attacker to inject malicious JavaScript code. This could compromise the victim's browser, take control of it, redirect the user to malicious domains, or access information being viewed by the legitimate user.

Recommendations For Arconte Áurea version 1.5.0.0, consider disabling JavaScript execution in the browser as a temporary workaround until a patch is available. Restrict access to sensitive information and avoid using the software until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-4093

Produtos afetados

Arconte Áurea

Referências · 6

• https://t.me/cvenotify/58294 · Publicação no Telegram
• https://t.me/cibsecurity/70724 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-4093 · Nota de Segurança
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea · Nota
• https://osv.dev/vulnerability/CVE-2023-4093 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1704122936456519732 · Publicação no Twitter