CVE-2023-41655

Summary

CVE-2023-41655 is a stored Cross-Site Scripting (XSS) vulnerability affecting versions 2.5.9 of the Andreas Heigl authLdap plugin. An attacker can exploit this admin privilege escalation flaw to inject malicious scripts into a website's pages, potentially gaining unauthorized access to user data or taking control of user sessions. Successful exploitation requires no user interaction, making it a serious threat to organizations using the affected plugin for authentication. To mitigate this risk, users are advised to update the plugin to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.