CVE-2023-29306

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Sep 13, 2023

Updated: Sep 15, 2023

CWE ID 79

Summary

CVE-2023-29306 is a reflective Cross-Site Scripting (XSS) vulnerability affecting Adobe Connect versions 12.3 and earlier. This issue allows malicious JavaScript code to be executed within a victim's browser if they visit a specially crafted URL referencing a vulnerable page. Attackers can leverage this vulnerability to steal sensitive information or redirect users to malicious websites. Users are advised to upgrade to the latest version of Adobe Connect to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Adobe Connect

Affected Vendors

Adobe

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sqkuF0
https://www.cve.org/CVERecord?id=CVE-2023-29306
https://nvd.nist.gov/vuln/detail/CVE-2023-29306

Back to Vulnerability Database