Cross-Site Scripting Vulnerability in UniFi Network by Ubiquiti

CVE-2023-32000

What is CVE-2023-32000?

A critical Cross-Site Scripting (XSS) vulnerability has been identified in UniFi Network, allowing attackers with Site Administrator credentials to exploit site configurations. By tricking a legitimate Administrator into visiting a specially crafted malicious web page, the attacker can execute harmful scripts in the context of the user's session. This could lead to unauthorized access and manipulation of sensitive data. It is advised that users immediately check their systems and apply patches as outlined in Ubiquiti's Security Advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References