CVE-2023-28025
Medium
Description
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.
SeverityMedium
CVSS6.6
Exploit probability—
ProductHcltech Bigfix Modern Client Management
PublishedDec 21, 2023
First seenDec 21, 2023
How to fix
Update
- hcltech bigfix_modern_client_management3.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hcltech bigfix_modern_client_management | v < 3.2 | 3.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.