CVE-2023-31868
CVSS Score of 10 (low)
Details
Summary
CVE-2023-31868 describes a vulnerability in Sage X3 version 12.14.0.50-0 that allows for Cross Site Scripting (XSS) attacks. The web application dynamically builds certain sections using user inputs, which are not verified or filtered by the application, allowing injected HTML/JavaScript code to be saved and executed by the user's web browser. Multiple injection points have been identified, with one major point requiring authentication with a common account to target an Administrator, while others require authentication as an Administrator. The impact is reduced due to the authentication requirement. The vulnerability has a base severity rating of 'MEDIUM' and a CVSS score of 5.4, indicating some risks but with low privileges required and low impacts on integrity and confidentiality.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions