CVE-2023-5118

MOYENNE 5.4CVE-2023-5118 · Published 11/01/2024 · updated 17/06/2026

En bref

CVE-2023-5118 est une vulnérabilité MOYENNE (CVSS 5.4) touchant kofax capture (tungstenautomation).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.34%, plus élevée que 26.9% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
kofax capture tungstenautomation	`≤ 11.0.0`	No fix yet

Description

The application is vulnerable to Stored Cross-Site Scripting (XSS) in the endpoint /sofer/DocumentService.asc/SaveAnnotation, where input data transmitted via the POST method in the parameters author and text are not adequately sanitized and validated. This allows for the injection of malicious JavaScript code. The vulnerability was identified in the function for adding new annotations while editing document content. Reporters inform that the vulnerability has been removed in software versions above 11.1.x. Previous versions may also be vulnerable, but this has not been confirmed.

References

cert.pl/en/posts/2024/01/CVE-2023-5118 · Third Party Advisory
cert.pl/posts/2024/01/CVE-2023-5118 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free