Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Mon, 07 Oct 2024 14:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | DOM XSS in `libs/cq/gui/components/coral/common/admin/timeline/clientlibs/timeline/js/listeners/events.change.js` | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2023-12-15T10:16:47.498Z
Updated: 2024-10-07T13:55:25.563Z
Reserved: 2023-11-16T23:29:25.385Z
Link: CVE-2023-48528
Vulnrichment
Updated: 2024-08-02T21:30:35.448Z
NVD
Status : Analyzed
Published: 2023-12-15T11:15:28.210
Modified: 2023-12-18T20:29:03.957
Link: CVE-2023-48528
Redhat
No data.