CVE-2023-4170

Summary

CVE-2023-4170 is a newly disclosed vulnerability affecting DedeBIZ 6.2.10. This issue, rated as problematic, impacts an unidentified functionality within the Article Handler component. An attacker can exploit this cross-site scripting (XSS) vulnerability remotely, leading to potential code injection and user data compromise. The exploit has been made public, increasing the risk for potential attacks. Vendor response has been absent despite early disclosure, leaving users to implement mitigations on their own. (VDB-236186)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.