Description
A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks CloudVision Portal
Default version status: unaffected
2026.2.0affected2026.1.0 to ≤ 2026.1.2affected2025.3.0 to ≤ 2025.3.3affected1.0.0 to < 2025.3.0affected