Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-23691

CVE-2023-23691

Description

Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim's browser to desynchronize its connection with the website, typically leading to XSS and DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Dell PowerVault ME5

Default version status: unaffected

  • 0 to < ME5.1.1.0.5affected

References