Threat Investigation
Request a demo

CVE-2023-44272

Medium

Description

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.

SeverityMedium
CVSS5.4
Exploit probability—
ProductCitadel
PublishedOct 4, 2023
First seenOct 4, 2023

How to fix

Update
  • citadel citadel994 or later

Affected products

ProductAffected versionsFixed in
citadel citadelv < 994994

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.