CVE-2023-37225

Summary

CVE-2023-37225 is a vulnerability affecting Pexip Infinity versions prior to 32. This issue permits Cross-Site Scripting (XSS) attacks through preconfigured links in the Webapp1 component. An attacker can inject malicious scripts into a victim's browser, potentially stealing sensitive information or taking control of their account. Users are advised to update their Pexip Infinity systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.