CVE-2023-6367: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles
In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within Roles.
If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6367?
The severity of CVE-2023-6367 is considered moderate due to its stored cross-site scripting (XSS) nature.
How do I fix CVE-2023-6367?
To fix CVE-2023-6367, upgrade your WhatsUp Gold to version 2023.1 or later to mitigate the vulnerability.
What versions of WhatsUp Gold are affected by CVE-2023-6367?
WhatsUp Gold versions prior to 2023.1 are affected by CVE-2023-6367.
What type of vulnerability is CVE-2023-6367?
CVE-2023-6367 is a stored cross-site scripting (XSS) vulnerability.
Can CVE-2023-6367 lead to further attacks?
Yes, if exploited, CVE-2023-6367 can allow an attacker to execute arbitrary scripts in the context of the user’s browser.