Cross-Site Scripting Vulnerability Affects OpenText Exceed Turbo X v12.5.1

CVE-2023-38536

What is CVE-2023-38536?

The vulnerability identified in OpenText Exceed Turbo X allows for HTML injection in the application, specifically in version 12.5.1. This vulnerability can be exploited to execute cross-site scripting attacks, enabling an attacker to inject malicious scripts into web pages viewed by users. Such exploitation can facilitate various malicious activities, including data theft, session hijacking, and spreading malware, posing significant security concerns for organizations using this product. Immediate corrective measures are recommended to mitigate the risks associated with this vulnerability.

References