CVE-2023-39370
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
In version 2023-02-16 of StarTrinity Softswitch, there is a persistent XSS vulnerability (CWE-79) that may allow attackers to inject malicious JavaScript code into the application.
Risk Assessment
Attackers could exploit this vulnerability to steal user data or hijack sessions, posing a significant security threat to the organization.
Recommendation
It is recommended to update StarTrinity Softswitch to the latest version to mitigate this vulnerability and conduct a security audit of the application.
Other vulnerabilities in StarTrinity Softswitch
See all- CVE-2023-39372High
StarTrinity Softswitch version 2023-02-16 contains multiple CSRF vulnerabilities (CWE-352) that may allow attackers to perform unauthorized actions on behalf of users.
- CVE-2023-39371High
In version 2023-02-16 of StarTrinity Softswitch, there is an Open Redirect vulnerability that may lead to unauthorized redirection of users to malicious sites.
- CVE-2023-39369High
Version 2023-02-16 of StarTrinity Softswitch has multiple reflected XSS vulnerabilities (CWE-79). An attacker can exploit these vulnerabilities to inject malicious JavaScript code into server responses.
Original NVD description (English source)
StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)