An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on.
References
| Link | Resource |
|---|---|
| https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 | Third Party Advisory |
| https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 | Third Party Advisory |
Configurations
History
23 May 2025, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:eptura:archibus:4.0.3:*:*:*:iphone_os:*:*:* | |
| References | () https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 - Third Party Advisory | |
| First Time |
Eptura
Eptura archibus |
21 Nov 2024, 08:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 - |
19 Aug 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
06 Mar 2024, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-05 23:15
Updated : 2025-05-23 14:45
NVD link : CVE-2023-48644
Mitre link : CVE-2023-48644
CVE.ORG link : CVE-2023-48644
JSON object : View
Products Affected
eptura
- archibus
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor