CVE-2024-51446 — Siemens / Polarion V2310

CVE-2024-51446

Siemens / Polarion V2310 PUBLISHED

Description (CNA)

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file upload feature of the affected application improperly sanitizes xml files. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by uploading specially crafted xml files that are later downloaded and viewed by other users of the application.

Affected (CNA)

Vendor / product	Versions
Siemens / Polarion V2310	affected 0 before *
Siemens / Polarion V2404	affected 0 before V2404.4

CWE

CWE-79

References

https://cert-portal.siemens.com/productcert/html/ssa-162255.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.