Cross site scripting

2021-10-0512:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.

CPENameOperatorVersion
fileruneq2021.03.26

CPE	Name	Operator	Version
	filerun	eq	2021.03.26

References

blog.filerun.com

syntegris-sec.github.io/filerun-advisory