CVE-2023-48226

OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Settings (for registration looks like validation is correct), a bad actor can send emails with HTML injected code to the victims. Bad actors can use this to phishing actions for example. Email is really send from OpenReplay, but bad actors can add there HTML code injected (content spoofing). Please notice that during Registration steps for FullName looks like is validated correct - can not type there, but using this kind of bypass/workaround - bad actors can achieve own goal. As of time of publication, no known fixes or workarounds are available.

• CWE-20
• CWE-94
• CWE-94

• https://bugcrowd.com/vulnerability-rating-taxonomyThird Party Advisory
• https://capec.mitre.org/data/definitions/242.htmlTechnical Description
• https://cwe.mitre.org/data/definitions/20.htmlTechnical Description
• https://github.com/openreplay/openreplay/blob/main/api/chalicelib/utils/html/invitation.html#L421Product
• https://github.com/openreplay/openreplay/security/advisories/GHSA-xpfv-454c-3fj4Exploit, Vendor Advisory
• https://bugcrowd.com/vulnerability-rating-taxonomyThird Party Advisory
• https://capec.mitre.org/data/definitions/242.htmlTechnical Description
• https://cwe.mitre.org/data/definitions/20.htmlTechnical Description
• https://github.com/openreplay/openreplay/blob/main/api/chalicelib/utils/html/invitation.html#L421Product
• https://github.com/openreplay/openreplay/security/advisories/GHSA-xpfv-454c-3fj4Exploit, Vendor Advisory

Published

Nov 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48220Decidim is a participatory democracy framework. Starting in …7.4
• CVE-2023-48221wire-avs provides Audio, Visual, and Signaling (AVS) functio…8.8
• CVE-2023-48222Rundeck is an open source automation service with a web cons…5.4
• CVE-2023-48223fast-jwt provides fast JSON Web Token (JWT) implementation. …5.9
• CVE-2023-48224Fides is an open-source privacy engineering platform for man…9.1
• CVE-2023-48225Laf is a cloud development platform. Prior to version 1.0.0-…9.1
• CVE-2023-48227Umbraco is an ASP.NET content management system (CMS). Start…4.3
• CVE-2023-48228authentik is an open-source identity provider. When initiali…9.8
• CVE-2023-48229Contiki-NG is an open-source, cross-platform operating syste…7.6
• CVE-2023-4823The WP Meta and Date Remover WordPress plugin before 2.2.0 p…5.4
• CVE-2023-48230Cap'n Proto is a data interchange format and capability-base…9.8
• CVE-2023-48231Vim is an open source command line text editor. When closing…4.3