Vulnerability Description
Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 (6.11.0.4) is also a fixed release.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Archerirm | Archer | >= 6.8.0.0, <= 6.11.0.4 |
Related Weaknesses (CWE)
References
- https://www.archerirm.community/t5/security-advisories/archer-update-for-stored-Vendor Advisory
- https://www.archerirm.community/t5/security-advisories/archer-update-for-stored-Vendor Advisory
FAQ
What is CVE-2023-30639?
CVE-2023-30639 is a vulnerability with a CVSS score of 7.1 (HIGH). Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HT...
How severe is CVE-2023-30639?
CVE-2023-30639 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-30639?
Check the references section above for vendor advisories and patch information. Affected products include: Archerirm Archer.