CVE-2023-25833

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser no stateful change made or customer data rendered...

CVE-2023-25833

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser no stateful change made or customer data rendered...

CVE-2023-25833

The CVE-2023-25833 entry concerns Esri Portal for ArcGIS, affecting version 11.0 and earlier. The vulnerability is an HTML injection in the portal that a remote, authenticated attacker can trigger by sending or linking to a crafted URL, causing the victim’s browser to render arbitrary HTML. Impac...