CVE-2023-43319: XSS
Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43319?
CVE-2023-43319 is a Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5.
What is the severity of CVE-2023-43319?
CVE-2023-43319 has a severity level of medium (6.1).
How does CVE-2023-43319 affect IceWarp WebClient 10.3.5?
CVE-2023-43319 allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the username parameter.
How can I fix CVE-2023-43319?
To fix CVE-2023-43319, update the IceWarp WebClient software to a version that addresses the vulnerability and avoid using untrusted inputs as part of the username parameter.
Where can I find more information about CVE-2023-43319?
You can find more information about CVE-2023-43319 at this link: https://medium.com/@muthumohanprasath.r/reflected-cross-site-scripting-on-icewarp-webclient-product-cve-2023-43319-c2ad758ac2bc