CVE-2023-26448

Summary

CVE-2023-26448 is a vulnerability that affects multiple products, including those with the identifiers afqUom, afqUol, afqUok, and more. The vulnerability allows for the execution of malicious script code within the victim's context, potentially leading to session hijacking or triggering unwanted actions through the web interface and API. To exploit this vulnerability, an attacker would need temporary access to the user's account or trick a user into accessing a compromised account. The issue has been remediated by sanitizing jslob content in custom log-in and log-out locations to prevent redirection to malicious content. No publicly available exploits are known at this time. The vulnerability is rated as medium severity with a base score of 5.4 and requires low privileges and user interaction to be exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.