CVE-2023-37530

Summary

CVE-2023-37530 is a newly discovered cross-site scripting (XSS) vulnerability affecting the Web Reports component of HCL BigFix Platform. An attacker can exploit this flaw to inject malicious JavaScript code into a webpage, potentially gaining unauthorized access to cookie-stored information. This vulnerability poses a significant risk, as cookies often contain sensitive user data, and successful exploitation could lead to identity theft or unauthorized system access. Users are strongly advised to apply the available patch as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.