Cross-Site Scripting Vulnerability in UniFi Network by Ubiquiti

CVE-2023-32000

What is CVE-2023-32000?

A critical Cross-Site Scripting (XSS) vulnerability has been identified in UniFi Network, allowing attackers with Site Administrator credentials to exploit site configurations. By tricking a legitimate Administrator into visiting a specially crafted malicious web page, the attacker can execute harmful scripts in the context of the user's session. This could lead to unauthorized access and manipulation of sensitive data. It is advised that users immediately check their systems and apply patches as outlined in Ubiquiti's Security Advisory.

References