CVE-2023-46948

MediumCVSS 5.4

Published: 23/09/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

A reflected Cross-Site Scripting (XSS) vulnerability was found in Temenos T24 Browser R19.40 in the about.jsp and genrequest.jsp components. An attacker can remotely execute arbitrary JavaScript code via the skin parameter.

Risk Assessment

The risk includes session hijacking, account takeover, or unauthorized actions performed in the victim's browser context.

Recommendation

Immediately update to the latest Temenos T24 version and apply input filtering for the skin parameter in the affected components.

Original NVD description (English source)

A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components.