CVE-2023-4843 MEDIUM

CVE-2023-4843

Vendor Pegasystems
Product Pega Platform
Weakness CWE-74
Published September 8, 2023
Last update September 25, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.

Key dates

02Disclosure timeline

September 8, 2023 CVE published
September 25, 2024 Record updated