CVE-2023-26291: XSS
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (loginform.mhtml modules), Forcepoint Web Security Portal on Hybrid (loginform.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-26291?
CVE-2023-26291 is an improper neutralization of input vulnerability, also known as a Cross-site Scripting (XSS) vulnerability, in Forcepoint Cloud Security Gateway (CSG) Portal and Forcepoint Web Security Portal.
What is the severity of CVE-2023-26291?
CVE-2023-26291 has a severity rating of 6.1, which is considered medium.
How does CVE-2023-26291 affect Forcepoint Cloud Security Gateway?
CVE-2023-26291 affects Forcepoint Cloud Security Gateway by allowing an attacker to execute malicious scripts on the CSG Portal, potentially leading to unauthorized access or manipulation of sensitive information.
How does CVE-2023-26291 affect Forcepoint Web Security Portal?
CVE-2023-26291 affects Forcepoint Web Security Portal by allowing an attacker to execute malicious scripts on the Web Security Portal, potentially leading to unauthorized access or manipulation of sensitive information.
How can I fix CVE-2023-26291?
To fix CVE-2023-26291, it is recommended to apply the latest updates and patches provided by Forcepoint. Additionally, proper input validation and output encoding should be implemented to mitigate the risk of Cross-site Scripting (XSS) vulnerabilities.