CVE-2020-8348

CVE-2020-8348 affects Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4. It is a DOM-based XSS that could allow code execution in an authenticated user’s browser session when a crafted URL is visited, possibly via phishing. The available documents explicitly describe the vulner...