Medium · 5.7 CVE-2024-49392 EUVD-2024-43419GHSA-48cm-7wff-qj95

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Wi…

Published Oct 17, 2024 · Updated Oct 17, 2024 · Assigned by Acronis

Vendor: Acronis Product: Acronis Cyber Files

Description

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.

Affected products

Vendor	Product	Affected	Fixed
Acronis	Acronis Cyber Files	unspecified – < 9.0.0x24	9.0.0x24

References

SEC-7554 vendor-advisory