CVE-2023-29306 in Connect

Riassunto

di MITRE • 13/09/2023

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Adobe Systems Incorporated
• Prenotare: 04/04/2023
• Divulgazione: 13/09/2023
• Moderazione: accettato
• Voce: VDB-239656
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (CNA)
• EPSS: 0.00403
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-29306
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-29306
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-29306/