XSS in Skyhigh Security SWG
Vulnerability Description
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0214
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- RedTeam Pentesting GmbH
Affected Vendor
Skyhigh Security
View all reports →