CVE-2023-4534
Low
Description
A vulnerability, which was classified as problematic, was found in NeoMind Fusion Platform up to 20230731. Affected is an unknown function of the file /fusion/portal/action/Link. The manipulation of the argument link leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238026 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
SeverityLow
CVSS3.5
Exploit probability—
ProductNeomind Fusion Platform
PublishedAug 25, 2023
First seenAug 25, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- neomind fusion_platform2023-07-31 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neomind fusion_platform | v < 2023-07-31 | 2023-07-31 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.