Description (CNA)
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Stormshield / Stormshield Network Security | affected 4.8.0 through 4.8.16; affected 5.0.0 through 5.0.6; unaffected 4.8.17; unaffected 5.0.7; unaffected 5.1.0 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.