Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | DOM XSS in `libs/commerce/gui/components/admin/collections/clientlibs/js/collectionoperationsactivator.js` | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2023-12-15T10:17:12.449Z
Updated: 2024-10-07T14:13:47.832Z
Reserved: 2023-11-16T23:29:25.401Z
Link: CVE-2023-48605
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-12-15T11:15:43.743
Modified: 2023-12-16T01:17:47.847
Link: CVE-2023-48605
Redhat
No data.