Skip to content
OpenAdvisories
High · 8.3 CVE-2019-3708 EUVD-2019-13343GHSA-x47w-3hp9-758p

Cross-Site Scripting Vulnerability in OVA file upload feature

Published Apr 17, 2019 · Updated Sep 17, 2024 · Assigned by dell

Description

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while uploading an OVA file. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Affected products

VendorProductAffectedFixed
Dell EMC Dell EMC IsilonSD Management Server 1.1.0 —

References