Medium · 6.1 CVE-2023-45181 EUVD-2023-49488GHSA-rvwc-2m5x-qrf7

IBM Jazz Foundation cross-site scripting

Published Nov 25, 2024 · Updated Nov 25, 2024 · Assigned by ibm

Description

IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Vendor	Product	Affected	Fixed
IBM	Jazz Foundation	7.0.2	—

References

https://www.ibm.com/support/pages/node/7176207