VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 3, 2023· Updated Jun 17, 2026

CVE-2023-40519

CVE-2023-40519

Description

A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.

Affected products

5
  • Broadpeak/Centralized Accounts Management Auth Agent4 versions
    cpe:2.3:a:broadpeak:centralized_accounts_management_auth_agent:00.12.01.9565588_1254b459:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:broadpeak:centralized_accounts_management_auth_agent:00.12.01.9565588_1254b459:*:*:*:*:*:*:*
    • cpe:2.3:a:broadpeak:centralized_accounts_management_auth_agent:01.01.00.19219575_ee9195b0:*:*:*:*:*:*:*
    • cpe:2.3:a:broadpeak:centralized_accounts_management_auth_agent:01.01.01.30097902_fd999e76:*:*:*:*:*:*:*
    • (no CPE)range: 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459
  • Broadpeak/Centralized Accounts Management Auth Agentdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.