Skip to content
fr Sign in
6.4 Medium

CVE-2023-22843 An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript…

Description

An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside the definition of a Threat Intelligence rule, that will be stored and can later be executed by another legitimate user viewing the details of such a rule. Via stored Cross-Site Scripting (XSS), an attacker may be able to perform unauthorized actions on behalf of legitimate users and/or gather sensitive information. JavaScript injection was possible in the contents for Yara rules, while limited HTML injection has been proven for packet and STYX rules.

Affected products and versions

Product Affected versions Fixed in
Guardian 22.6 earliest → < 22.6.2 22.6.2
CMC 22.6 earliest → < 22.6.2 22.6.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Guardian

The 53 CVEs of Guardian →
CVE-2026-33924 Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient… 7.5 High CVE-2026-33923 A signature verification vulnerability was discovered in the update installation functionality due to inconsistent… 7.5 High CVE-2026-33920 A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to… 5.1 Medium CVE-2026-33391 An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient… 5.3 Medium
Track this CVE