PT-2024-13392 · Temenos · Temenos T24 Browser

Azraelsblade · Published 2024-09-23 · Updated 2024-09-26 · CVE-2023-46948

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Temenos T24 Browser version R19.40

Description A reflected Cross-Site Scripting (XSS) issue was discovered, allowing a remote attacker to execute arbitrary JavaScript code. This is achieved via the skin parameter in the "about.jsp" and "genrequest.jsp" components.

Recommendations For Temenos T24 Browser version R19.40, consider restricting access to the about.jsp and genrequest.jsp components until a patch is available. As a temporary workaround, avoid using the skin parameter in these components to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-46948

Affected Products

Temenos T24 Browser

References · 6

• 🔥 https://github.com/AzraelsBlade/CVE-2023-46948 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-46948 · Security Note
• http://temenos.com · Note
• https://t.me/cvedetector/6205 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1838315322098557025 · Twitter Post
• https://twitter.com/CVEnew/status/1838270221481619764 · Twitter Post