PT-2023-25842 · Rsa · Archer Platform

Published 2023-07-14 · Updated 2023-07-26 · CVE-2023-37223

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6

Description The issue is a Cross Site Scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.

Recommendations For Archer Platform versions prior to 6.13, update to version 6.13 or later. For Archer Platform version 6.12.0.6, no additional action is required as this version is mentioned as fixed.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-37223

Affected Products

Archer Platform

References · 5

• https://osv.dev/vulnerability/CVE-2023-37223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37223 · Security Note
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Vendor Advisory
• https://t.me/cibsecurity/66752 · Telegram Post
• https://archerirm.com · Note