CVE-2023-29713

Summary

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.vadesecure.com/en/
• https://info.vadesecure.com/hubfs/Ressource%20Marketing%20Website/Datasheet/EN/Vade_Secure_DS_Gateway_EN.pdf
• https://labs.yarix.com/advisories/cve-2023-29713-reflected-xss-in-vade-secure-gateway/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.vadesecure.com/en/
• https://info.vadesecure.com/hubfs/Ressource%20Marketing%20Website/Datasheet/EN/Vade_Secure_DS_Gateway_EN.pdf
• https://labs.yarix.com/advisories/cve-2023-29713-reflected-xss-in-vade-secure-gateway/

• ←Previous
• Next→