Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Mon, 07 Oct 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | DOM XSS in `libs/cq/gui/components/authoring/dialog/fileupload/clientlibs/fileupload/js/fileupload.js` | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2023-12-15T10:15:48.848Z
Updated: 2024-10-07T14:16:34.377Z
Reserved: 2023-11-16T23:29:25.368Z
Link: CVE-2023-48446
Vulnrichment
Updated: 2024-08-02T21:30:35.361Z
NVD
Status : Analyzed
Published: 2023-12-15T11:15:11.530
Modified: 2023-12-18T19:19:29.157
Link: CVE-2023-48446
Redhat
No data.