Beveiligingsadvies

CVE-2023-25841

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-21 18:38:24

Laatst bijgewerkt 2025-04-10 18:43:52

Toegewezen door Esri

CVSS-score 6.1

Status PUBLISHED

Beschrijving

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. Mitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.

← Alle CVE's bekijken Bekijk op cve.org ↗