Lucene search
PRIOn knowledge basePRION:CVE-2023-25841HistoryJul 21, 2023 - 7:15 p.m.
Cross site scripting
2023-07-2119:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-site scripting
esri arcgis
vulnerability
windows
linux
remote attacker
crafted content
arbitrary code execution
mitigation
There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 10.8.1 – 11.0 on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
Mitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.
| CPE | Name | Operator | Version |
|---|---|---|---|
| arcgis_server | ge | 10.8.1 | |
| arcgis_server | lt | 11.1 |
Related
cve
cve
CVE-2023-25841
2023-07-21 19:15:10
nvd
nvd
CVE-2023-25841
2023-07-21 19:15:10
cvelist
cvelist
CVE-2023-25841 BUG-000158075 Stored XSS issue in ArcGIS Server
2023-07-21 18:38:24