CVE-2023-28025: An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28025?
CVE-2023-28025 is considered a medium severity vulnerability that allows for potential stored XSS attacks.
How do I fix CVE-2023-28025?
To fix CVE-2023-28025, ensure that all user inputs are properly sanitized and validated prior to processing.
What systems are affected by CVE-2023-28025?
CVE-2023-28025 affects HCLtech Bigfix Modern Client Management versions prior to 3.2.
What type of vulnerability is CVE-2023-28025?
CVE-2023-28025 is a stored cross-site scripting (XSS) vulnerability due to improper handling of user inputs.
Can CVE-2023-28025 lead to serious security issues?
Yes, CVE-2023-28025 can lead to serious security issues such as unauthorized access to sensitive information via the execution of malicious scripts.