CVE-2023-25833 in Portal for ArcGIS

Tóm tắt

Bởi MITRE • 10/05/2023

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or customer data rendered).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• chịu trách nhiệm: Environmental Systems Research Institute, Inc.
• Đặt trước: 15/02/2023
• Tiết lộ: 10/05/2023
• Kiểm duyệt: được chấp nhận
• mục: VDB-228539
• CPE: sẵn sàng
• CWE: CWE-80 (Đã xác nhận)
• CVSS: 4.1 (CNA)
• EPSS: 0.00443
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-25833
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-25833
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-25833/