Description
Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 20 Apr 2023.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.