CVE-2023-48460

Summary

CVE-2023-48460 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and older. This issue is DOM-based, meaning it exploits vulnerabilities within the browser's rendering of a webpage. An attacker can manipulate a URL to inject malicious JavaScript code into a vulnerable page. If successfully executed, the code may run within the victim's browser, potentially leading to unauthorized access or data theft. This vulnerability poses a significant risk, as it does not require user interaction beyond visiting a malicious URL. Adobe strongly recommends users update their Experience Manager installations to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.