CVE-2023-6778
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Dec 18, 2023
Updated: Feb 8, 2024
CWE ID 79
Summary
CVE-2023-6778 is a Cross-Site Scripting (XSS) vulnerability affecting the clearml-server repository on GitHub, specifically versions prior to 1.13.0. Attackers can exploit this flaw by injecting malicious scripts into the application via stored data. Successful attacks could lead to unauthorized access to user sessions, data theft, or even complete system takeover. Developers are urged to upgrade to the latest version of clearml-server to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share