CVE-2023-37874

Summary

CVE-2023-37874 is a stored Cross-Site Scripting (XSS) vulnerability found in the Dimitar Ivanov HTTP Headers plugin, specifically affecting versions 1.18.11 and below. This vulnerability has a risk score of 26 and a base severity rating of MEDIUM. It requires high privileges and user interaction to exploit, with a network attack vector. The potential danger it poses to an organization is low in terms of integrity and confidentiality impact, as well as availability impact. The affected products include sRkmIZ, sRkmIY, sRkmIR, sRkmIQ, sRkmIT, sRkmIS, sRkmIV, sRkmIU, sRkmIX, sRkmIW, sRkmIJ, sRkmII, sRkmIL, sRkmIK, sRkmIN, sRkmIM, sRkmIP, sRkmIO, sRkmIB, sRkmIA, sRkmID to name a few. To remediate the vulnerability and mitigate the risk it poses to an organization's web page generation process from improper neutralization of input during cross-site scripting attacks (CWE-79), it is recommended to update the Dimitar Ivanov HTTP Headers plugin to a version higher than 1.18.11.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.