A
n issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on.
References
| Link | Resource |
|---|---|
| https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-48644 | |
| https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 | Third Party Advisory |
| https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 | Third Party Advisory |
Configurations
History
30 May 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 May 2025, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:eptura:archibus:4.0.3:*:*:*:iphone_os:*:*:* | |
| References | () https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 - Third Party Advisory | |
| First Time |
Eptura archibus
Eptura |
21 Nov 2024, 08:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://excellium-services.com/cert-xlm-advisory/CVE-2023-48644 - |
19 Aug 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
Information
Published : 2024-03-05 23:15
Updated : 2025-05-30 16:15
NVD link : CVE-2023-48644
Mitre link : CVE-2023-48644
CVE.ORG link : CVE-2023-48644
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor