CVE-2023-4393

Summary

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

Affected Software

Weaknesses

• CWE-116: CWE-116 Improper Encoding or Escaping of Output
• CWE-147: CWE-147: Improper Neutralization of Input Terminators

ADP Enrichment

CVE Program Container

Additional References

• https://www.themissinglink.com.au/security-advisories/cve-2023-4393

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.themissinglink.com.au/security-advisories/cve-2023-4393

• ←Previous
• Next→