Description
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Stormshield Stormshield Network Security
Default version status: unknown
5.0.0 to ≤ 5.0.9affected5.1.0 to ≤ 5.1.3affected5.0.10unaffected5.1.4 EAunaffected