CVE-2023-25841

creationtimestamp| type| source ---|---|--- 2023-07-21 22:23:43+00:00| seen| https://t.me/cibsecurity/67109 2025-04-10 18:49:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11299...

CVE-2023-25841

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s...

CVE-2023-25841

CVE-2023-25841 describes a stored Cross-site Scripting (XSS) vulnerability in Esri ArcGIS Server. The connected sources confirm affected software as Esri ArcGIS Server versions 10.8.1 through 11.0 on Windows and Linux. The root issue is a lack of proper input filtering/escaping, enabling a remote...