CVE-2019-3708 — Cross-Site Scripting Vulnerability in OVA file upload feature

CVE-2019-3708

Cross-Site Scripting Vulnerability in OVA file upload feature PUBLISHED

Description (CNA)

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while uploading an OVA file. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Affected (CNA)

Vendor / product	Versions
Dell EMC / Dell EMC IsilonSD Management Server	affected 1.1.0

CWE

No CWE identifiers supplied.

References

https://seclists.org/fulldisclosure/2019/Apr/16

ADP enrichment

CVE

No English description supplied.

https://seclists.org/fulldisclosure/2019/Apr/16