CVE-2023-46126

Summary

CVE-2023-46126 is a vulnerability affecting the Fides open-source privacy engineering platform. This issue allows Admin UI users with the contributor role or higher to craft malicious URLs for privacy policies, which can trigger JavaScript execution when served by an integrated website. The JavaScript's domain scope is that of the integrated site. The vulnerability poses a risk to enforcing data privacy regulations and has been addressed in Fides version 2.22.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.