CVE-2023-48644: XSS
An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48644?
CVE-2023-48644 is classified as a critical XSS vulnerability affecting the Archibus app 4.0.3 for iOS.
How do I fix CVE-2023-48644?
To mitigate CVE-2023-48644, update the Archibus app to the latest version that addresses the XSS vulnerability.
What impact does CVE-2023-48644 have on users?
CVE-2023-48644 allows attackers to perform actions on behalf of the user and exfiltrate data through the app's create work request feature.
Is CVE-2023-48644 remotely exploitable?
Yes, CVE-2023-48644 can be exploited remotely by an attacker manipulating the description field in the app.
Which version of the Archibus app is affected by CVE-2023-48644?
CVE-2023-48644 specifically affects version 4.0.3 of the Archibus app for iOS.