Description
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Cyber Protect 16 | unspecified – < 39169 | 39169 |
Advisories 1
- WID-SEC-2025-0005 Acronis Cyber Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 2, 2025
References
- SEC-3647 vendor-advisory