CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability

High · published May 1, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 (6.11.0.4) is also a fixed release.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Published
2023-05-01T00:00Z
EPSS history
Timeline
  • 01 MAY 00:00Z
    Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability
    cvelistv5