← CVE Intelligence

CVE-2020-8348

Lenovo / Enterprise Network Disk PUBLISHED

Description (CNA)

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited, possibly through phishing.

Affected (CNA)

Vendor / productVersions
Lenovo / Enterprise Network Diskaffected unspecified before 6.1 patch 6 hotfix 4

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.