CVE-2023-28347: XSS
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console application and achieve remote code execution as NT AUTHORITY/SYSTEM on all connected Student Consoles and the Teacher Console in a Zero Click manner.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28347?
CVE-2023-28347 is considered a high-severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2023-28347?
To fix CVE-2023-28347, upgrade to a patched version of Faronics Insight that addresses the identified XSS vulnerabilities.
What software is affected by CVE-2023-28347?
CVE-2023-28347 affects Faronics Insight version 10.0.19045 on Windows operating systems.
Can CVE-2023-28347 be exploited remotely?
Yes, CVE-2023-28347 can potentially be exploited remotely by unauthenticated attackers through crafted scripts.
What are the potential impacts of CVE-2023-28347?
The impacts of CVE-2023-28347 include unauthorized data access and manipulation within the Teacher Console of Faronics Insight.