medium5.4
CVE-2023-34637
A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via inje…
Impact
A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isarnet | Isarflow | through 5.23 |