CVE-2023-4093: fujitsu arconte_aurea Cross-site Scripting

Vulnerability summary

CVE-2023-4093 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in fujitsu arconte_aurea. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.7% of scored vulnerabilities.

Timeline

1. 19-09-2023
   PublishedVulnerability first disclosed.
2. 06-09-2024
   Last modifiedVulnerability information updated.

Description

Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access information being viewed by the legitimate user.

• CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.