Unrated severityNVD Advisory· Published Oct 3, 2023· Updated Sep 20, 2024

CVE-2023-40519

Description

A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.

Affected products

Broadpeak/Centralized Accounts Management Auth Agentdescription
Broadpeak/Centralized Accounts Management Auth Agentllm-create
Range: =01.01.00.19219575_ee9195b0, =01.01.01.30097902_fd999e76, =00.12.01.9565588_1254b459

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

medium.com/munchy-bytes/security-disclosure-of-vulnerabilities-cve-2023-40519-2fc319737dfamitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000