Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-09-18T00:00:00

Updated: 2024-08-02T17:16:30.857Z

Reserved: 2023-07-10T00:00:00

Link: CVE-2023-37611

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-09-18T22:15:45.803

Modified: 2024-11-21T08:12:01.843

Link: CVE-2023-37611

cve-icon Redhat

No data.