CVE-2023-6072

Publication date

2024-02-13 09:39:54

Family

trellix

State

PUBLISHED

Description

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.