Cross site scripting

2023-07-0719:15:00

PRIOn knowledge base

www.prio-n.com

ibm cloud object system

cross-site scripting

javascript injection

credential disclosure

nvd

ibm x-force id

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213650.

CPENameOperatorVersion
cloud_object_storage_systemge3.16.0
cloud_object_storage_systemlt3.16.0.47
cloud_object_storage_systemlt3.15.8.106

Name	Operator	Version
cloud_object_storage_system	ge	3.16.0
cloud_object_storage_system	lt	3.16.0.47
cloud_object_storage_system	lt	3.15.8.106

References

exchange.xforce.ibmcloud.com/vulnerabilities/213650

www.ibm.com/support/pages/node/6517124