HTML Injection Vulnerability in Pega Platform by Pegasystems

CVE-2023-4843

What is CVE-2023-4843?

An HTML Injection vulnerability exists in Pega Platform versions 7.1 to 8.8.3, specifically tied to the name field in Visual Business Director. This field can only be altered by users who are authenticated as administrators, which could allow for the injection of malicious HTML content. If exploited, this could lead to unauthorized data manipulation or other security concerns. Organizations using affected versions are advised to review their security policies and consider applying available remediation measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References