CVE Catalog
CVE-2023-33231
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.46%
36th percentile - higher than 36% of all known CVEs
Summary
In DPA version 2023.2, an XSS attack was possible due to insufficient input validation.
Risk Assessment
An XSS attack can lead to user data theft and session hijacking, posing a serious security threat to the organization.
Recommendation
It is recommended to implement proper input validation mechanisms to prevent XSS attacks.
Original NVD description (English source)
XSS attack was possible in DPA 2023.2 due to insufficient input validation