Ibm · Ibm Business Automation Workflow · CVE-2023-24957
**Name of the Vulnerable Software and Affected Versions**
IBM Business Automation Workflow versions 18.0.0.0 through 22.0.2
**Description**
The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.
**Recommendations**
For versions 18.0.0.0 through 22.0.2, update to a version that includes the fix for this issue to prevent cross-site scripting attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.