IBM Engineering Test Management Vulnerable to Stored Cross-Site Scripting

CVE-2023-43054

What is CVE-2023-43054?

IBM Engineering Test Management versions 7.0.2 and 7.0.3 exhibit a vulnerability that allows stored cross-site scripting. This flaw enables users to inject arbitrary JavaScript code directly into the Web UI, which can manipulate the intended functionality of the application. As a result, this could lead to potential exposure of sensitive information, including user credentials, within a trusted session. Users are advised to apply the necessary updates to mitigate this risk.

References