CVE-2023-48528

Summary

CVE-2023-48528 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue is DOM-based, meaning it exploits vulnerabilities in the handling of user input within the browser. An attacker with low privileges can manipulate a URL to reference a vulnerable page, potentially injecting malicious JavaScript code. If a victim visits the malicious URL, the attacker may execute the code within their browser, leading to unintended actions or data theft.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.