cve/2023/CVE-2023-35971.md

### [CVE-2023-35971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35971)
![](https://img.shields.io/static/v1?label=Product&message=Aruba%20Mobility%20Conductor%20(formerly%20Mobility%20Master)%3B%20Aruba%20Mobility%20Controllers%3B%20WLAN%20Gateways%20and%20SD-WAN%20Gateways%20managed%20by%20Aruba%20Central&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/123ojp/123ojp