Skip to content
OpenAdvisories
High ICSA-23-271-02 5 CVEs

DEXMA DexGate

Published Sep 26, 2023 · Updated Sep 26, 2023

Vendor: DEXMA Product: DexGate

Summary

Successful exploitation of these vulnerabilities could result in the attacker impersonating a user, executing arbitrary code, and accessing the connected network.

Vulnerabilities 5

  • Medium 6.3
    CVE-2023-41088

    Cleartext Transmission of Sensitive Information in DEXMA DEXGate

    The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us th…

    DEXMA DexGate
  • Medium 5.5
    CVE-2023-42435

    Cross-Site Request Forgery in DEXMA DEXGate

    The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user.

    DEXMA DexGate
  • Medium 5.4
    CVE-2023-40153

    Cross-site Scripting in DEXMA DEXGate

    The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software.

    DEXMA DexGate
  • Medium 5.3
    CVE-2023-42666

    Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate

    The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version about the web server used.

    DEXMA DexGate
  • Medium 4.5
    CVE-2023-4108

    Audit logging fails to sanitize post metadata

    Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged

    Mattermost Mattermost github.com/mattermost/mattermost-server/v6 Go

Revision history

  1. #1

    Initial Publication

References