IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2021-53334)

A cross-site scripting vulnerability exists in IBM Jazz Foundation, a next-generation collaboration platform for software delivery technologies, which stems from a system that allows users to embed arbitrary JavaScript code in the Web UI to change the intended functionality, which could be used by an attacker to gain access to credentials in a trusted session The vulnerability stems from the fact that the system allows a user to embed arbitrary JavaScript code in the Web UI, which changes the intended functionality and allows an attacker to obtain credentials in a trusted session.