CVE-2023-48605

Summary

CVE-2023-48605 is a Cross-site Scripting (DOM-based XSS) vulnerability that affects Adobe Experience Manager versions 6.5.18 and earlier. The vulnerability allows a low-privileged attacker to execute malicious JavaScript content within the victim's browser if they can convince the victim to visit a URL referencing a vulnerable page. The vulnerability has a risk score of 25 and a base severity of MEDIUM. To remediate the issue, organizations should update their Adobe Experience Manager software to version 6.5.19 or later, which includes a fix for this vulnerability. This vulnerability poses a potential danger to organizations as it could be exploited to steal sensitive information or perform unauthorized actions within the context of the victim's browser.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.