ZeroHour

CVE-2023-20134

CVSS 3.1
6.5 medium
EPSS
<1%p38
Published
()
Modified
Description

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory.

Vendors
cisco
Products
webex meetings
Weakness
CWE-20, CWE-434
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.