PT-2023-25844 · Pexip · Pexip Infinity

Published 2023-12-25 · Updated 2023-12-29 · CVE-2023-37225

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 32

Description The issue allows for Webapp1 XSS via preconfigured links.

Recommendations For versions prior to 32, update to version 32 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-37225

Affected Products

Pexip Infinity

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-37225 · Security Note
• https://docs.pexip.com/admin/security_bulletins.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37225 · Vendor Advisory
• https://t.me/cvenotify/65085 · Telegram Post