CVE-2023-48453: Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48453?
CVE-2023-48453 has a critical severity level due to its potential for exploitation via Cross-site Scripting (DOM-based XSS).
How do I fix CVE-2023-48453?
To mitigate CVE-2023-48453, upgrade to Adobe Experience Manager versions later than 6.5.18 or ensure you are not using affected versions of Adobe Experience Manager Cloud Service before 2023.11.
Who is affected by CVE-2023-48453?
CVE-2023-48453 affects Adobe Experience Manager versions 6.5.18 and earlier as well as Adobe Experience Manager Cloud Service versions prior to 2023.11.
What kind of attack can be performed using CVE-2023-48453?
CVE-2023-48453 allows low-privileged attackers to execute malicious JavaScript within a victim's browser through a vulnerable page.
What should I do if my organization uses Adobe Experience Manager?
If your organization uses Adobe Experience Manager, it is crucial to check your version and apply necessary updates to protect against CVE-2023-48453.