CVE-2026-113465: CVE-2026-113465: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.

Özet bilgiler

CVSS v3.1

6.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS

%0,23 (yüzdelik 13)

CWE

CWE-79

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• advisories.stormshield.eu
• CWE-79