First published: Wed Jul 05 2023(Updated: )
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sophos iView |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-33335 is a vulnerability that allows arbitrary script to be executed in Sophos iView through the grpname parameter.
The severity of CVE-2023-33335 is medium with a severity value of 6.1.
CVE-2023-33335 affects Sophos iView by allowing arbitrary script execution through the grpname parameter.
The CWE associated with CVE-2023-33335 is CWE-79, which is a vulnerability related to Cross-Site Scripting (XSS).
To mitigate the risk of CVE-2023-33335 in Sophos iView, apply the latest patches or updates provided by Sophos and consider implementing input validation to prevent malicious script execution.