CVE-2023-4594

Summary

CVE-2023-4594 is a stored XSS vulnerability that affects the MailAdmin_dll.htm file. An attacker can exploit this issue by injecting malicious JavaScript code via GET and POST methods on multiple parameters in this file. Successful exploitation could lead to unintended execution of the attacker's code in the user's browser, potentially compromising their session or stealing sensitive information. This vulnerability poses a significant risk to users who visit compromised websites or interact with malicious emails. It is recommended that affected systems are patched as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.