CVE Catalog
CVE-2023-37223
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
The Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13, fixed in v.6.12.0.6 and v.6.13.0, allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.
Risk Assessment
The organization may be exposed to remote code execution, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update Archer Platform to v.6.12.0.6 or v.6.13.0 to mitigate this vulnerability.
Original NVD description (English source)
Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.