CVE-2023-26140

Summary

CVE-2023-26140 is a Cross-site Scripting (XSS) vulnerability affecting versions of the @excalidraw/excalidraw package. Malicious scripts can be injected into whiteboard objects through embedded links due to insufficient input sanitization. Successful exploitation of this vulnerability could lead to unintended execution of malicious code in users' browsers, potentially compromising their data or sessions. Users are advised to update to the latest package version or implement input validation measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.