Description
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Cyber Protect 16 | unspecified – < 37391 | 37391 |
Advisories 1
- WID-SEC-2024-0493 Acronis Cyber Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 27, 2024
References
- SEC-3469 vendor-advisory