Super FabriXss: an RCE vulnerability in Azure Service Fabric Explorer

Researchers at Orca Security disclosed how they found a remote code execution vulnerability in Azure Service Fabric Explorer. The vulnerability was reported to the Microsoft Security Response Center MSRC with responsible disclosure and was included by Microsoft in their March 2023 Patch Tuesday...

Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFX

Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer SFX that could lead to unauthenticated remote code execution. Tracked as CVE-2023-23383 CVSS score: 8.2, the issue has been dubbed "Super FabriXss" by Orca Security, a nod to the FabriXss flaw CVE-2022-35829,...

Azure Service Fabric Explorer Spoofing (March 2023)

The Azure Service Fabric installed on the remote host is affected by a spoofing vulnerability. A remote, unauthenticated attacker can exploit this to compromise confidentiality. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2023-23383

Service Fabric Explorer Spoofing Vulnerability...

CVE-2023-23383

CVE-2023-23383 is a spoofing vulnerability affecting Azure Service Fabric Explorer (SFX). Public materials describe a remote, unauthenticated chain enabling spoofed UI and, in a detailed exploit write-up, remote code execution via an XSS chain in SFX 9.1.1436.9590 and earlier. Affected product/ve...