CVE-2023-48458

Summary

CVE-2023-48458 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue is DOM-based, meaning it exploits flaws in the handling of user input within the browser. An attacker, with low privileges, can manipulate a URL leading to a vulnerable page, potentially executing malicious JavaScript code in a victim's browser. Successful exploitation could lead to unintended user actions or data exposure. Users are encouraged to update their Adobe Experience Manager installations promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.