CVE-2023-31928

published 2023-08-02

CVE-2023-31928: A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0…

Priority P4 26 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
broadcom	brocade_fabric_operating_system	< 9.2.0	9.2.0
brocade	fabric_os	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79