WID-SEC-2023-2317 — Adobe Connect: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Connect ist eine Software zur Erstellung von Informationen, Präsentationen, Online-Schulungsunterlagen, Webkonferenzen, Lernmodulen und für Benutzer-Desktop-Sharing.

Vulnerabilities 2

Medium 6.1

CVE-2023-29305

Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

Adobe Adobe Connect

Sep 13, 2023
Medium 6.1

CVE-2023-29306

Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

Adobe Adobe Connect

Sep 13, 2023

Revision history

2023-09-12 #1
Initiale Fassung

References

Adobe Security Bulletin APSB23-33 vom 2023-09-12
https://helpx.adobe.com/security/products/connect/apsb23-33.html