Description (CNA)
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Stormshield / Stormshield Network Security | affected 5.0.0 through 5.0.9; affected 5.1.0 through 5.1.3; unaffected 5.0.10; unaffected 5.1.4 EA |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.