Description
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.
To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Stormshield | Stormshield Network Security | 5.0.0 – ≤ 5.0.9, 5.1.0 – ≤ 5.1.3 | 5.0.10 |