CVE-2023-44040: XSS
In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerability that can be exploited by an internal unauthenticated attacker for JavaScript execution in the context of the user trying to authenticate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44040?
CVE-2023-44040 has been classified as a high-severity vulnerability due to its potential for exploitation within an internal network by unauthenticated attackers.
How do I fix CVE-2023-44040?
To mitigate CVE-2023-44040, you should upgrade VeridiumID to version 3.5.0 or later to ensure the vulnerability is patched.
Who is affected by CVE-2023-44040?
CVE-2023-44040 affects all versions of VeridiumID prior to 3.5.0.
What kind of attack is associated with CVE-2023-44040?
CVE-2023-44040 is associated with a cross-site scripting (XSS) attack that could allow execution of malicious JavaScript.
Can CVE-2023-44040 be exploited remotely?
No, CVE-2023-44040 requires an internal unauthenticated attacker to exploit the vulnerability.