medium6.1Public exploit code
CVE-2023-0214
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)2023-04-05 · webapps · multiple
Impact
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trellix | Skyhigh Secure Web Gateway | from 10.0.0 before 10.2.17 from 11.0.0 before 11.2.6 Version 12.0.0 |