DOM-based XSS Vulnerability in Cisco Webex Web Framework

CVE-2018-0390

What is CVE-2018-0390?

A vulnerability in the web framework of Cisco Webex enables unauthenticated, remote attackers to perform DOM-based cross-site scripting (XSS) attacks. This occurs due to inadequate input validation of parameters submitted via the HTTP POST method. By exploiting this flaw, attackers can inject malicious scripts into the affected web interface, potentially executing arbitrary HTML or script code in the browser of a user interacting with the compromised element, leading to data exposure or further attacks. To mitigate this risk, it is crucial to implement proper input validation and security controls.

References