Description
Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
References
https://helpx.adobe.com/security/products/connect/apsb21-91.html
PatchRelease NotesVendor Advisory
https://helpx.adobe.com/security/products/connect/apsb21-91.html
PatchRelease NotesVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.1 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2021-10-15T13:15:08.627Z
4 years agoLast modified
2024-11-21T05:24:38.023Z
1 year ago