Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Technical Severity

CVSS v3.1 Metrics

MEDIUM

6.1 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitation Likelihood

EPSS Prediction

19.64 %

Predictive Probability

Percentile Rank

95.4 th

Documented as more likely to be exploited than 95.4% of known CVEs.

Detection Date

Mar 30, 2023

Remediation Due

Apr 20, 2023

CISA Catalog Active

Threat Analysis

Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.

Remediation Directive

Apply updates per vendor instructions.

External Intelligence

https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2022-39197