CVE-2023-2509: A Cross-Site Scripting(XSS) vulnerability was found on ADM
A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-2509 vulnerability?
CVE-2023-2509 is a Cross-Site Scripting(XSS) vulnerability found on ADM, LooksGood, and SoundsGood Apps, which allows an attacker to inject malicious scripts to access sensitive information.
How does CVE-2023-2509 vulnerability work?
An attacker can exploit CVE-2023-2509 vulnerability by injecting malicious scripts into the target applications, enabling them to access cookies and sensitive information stored by the browser.
Which software versions are affected by CVE-2023-2509 vulnerability?
CVE-2023-2509 vulnerability affects ASUSTOR ADM versions 4.0.0, 4.0.6-reg2, 4.1.0, and 4.1.0-rlq1, as well as Looksgood version 2.0.0 and Soundsgood version 2.3.0.
How severe is the CVE-2023-2509 vulnerability?
CVE-2023-2509 has a severity rating of 6.1, which is considered high.
How can I fix the CVE-2023-2509 vulnerability?
To fix the CVE-2023-2509 vulnerability, it is recommended to update affected software versions to the latest available patches or versions.