CVE-2023-39369
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Version 2023-02-16 of StarTrinity Softswitch has multiple reflected XSS vulnerabilities (CWE-79). An attacker can exploit these vulnerabilities to inject malicious JavaScript code into server responses.
Risk Assessment
Exploitation of these vulnerabilities may lead to user data theft and session hijacking, posing a significant security threat to the organization.
Recommendation
It is recommended to update StarTrinity Softswitch to the latest version to mitigate these vulnerabilities and implement additional security measures against XSS attacks.
Other vulnerabilities in StarTrinity Softswitch
See all- CVE-2023-39372High
StarTrinity Softswitch version 2023-02-16 contains multiple CSRF vulnerabilities (CWE-352) that may allow attackers to perform unauthorized actions on behalf of users.
- CVE-2023-39371High
In version 2023-02-16 of StarTrinity Softswitch, there is an Open Redirect vulnerability that may lead to unauthorized redirection of users to malicious sites.
- CVE-2023-39370High
In version 2023-02-16 of StarTrinity Softswitch, there is a persistent XSS vulnerability (CWE-79) that may allow attackers to inject malicious JavaScript code into the application.
Original NVD description (English source)
StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)