CISA Adds One Known Exploited Vulnerability to Catalog

Here is a summary of the document in the provided template:

Summary:

CISA has added CVE-2023-5631, a Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability, to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. This vulnerability, like many others in the catalog, poses a significant risk to the federal enterprise and should be prioritized for remediation. While BOD 22-01 only applies to Federal Civilian Executive Branch (FCEB) agencies, CISA encourages all organizations to reduce their exposure to cyberattacks by promptly remediating catalog vulnerabilities as part of their vulnerability management practice.