CVE-2023-37411

CVE-2023-37411 affects IBM Aspera Faspex 5.0.0–5.0.6, where an input validation/escaping flaw enables stored cross-site scripting in the Web UI, potentially leading to credential disclosure within a trusted session. The issue stems from inadequate filtering of user-supplied data in Faspex and is ...