CVE-2023-31868

Summary

CVE-2023-31868 is a Cross-Site Scripting (XSS) vulnerability affecting Sage X3 version 12.14.0.50-0. The issue lies in the application's failure to validate and filter user inputs, allowing malicious HTML/JavaScript code to be injected and executed by the web browser. Several injection points have been identified, some requiring only common account authentication, while others necessitate Administrator privileges. The major concern is an attacker's ability to target Administrators through a common account, leading to potentially significant impact.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.