CVE-2023-29714

Summary

CVE-2023-29714 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting Vade Secure Gateway. This issue permits remote attackers to inject and execute malicious scripts on a user's browser by manipulating the username, password, and language cookies. Successful exploitation could lead to unauthorized access to sensitive data or session hijacking. Users are urged to update their gateway software to the latest version and practice safe browsing habits to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.