CVE-2023-37223 MEDIUM

CVE-2023-37223

Vendor N/A
Product n/a
Published July 14, 2023
Last update October 30, 2024

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N

What the vulnerability does

01Description

Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.

Key dates

02Disclosure timeline

July 14, 2023 CVE published
October 30, 2024 Record updated