Cross-Site Scripting Vulnerability in Flexense SyncBreeze Affects Multiple Versions
CVE-2018-10563

6.1MEDIUM

Key Information:

Vendor

Flexense

Status
Syncbreeze
Vendor
CVE Published:
2 May 2018

What is CVE-2018-10563?

A Cross-Site Scripting vulnerability exists in Flexense SyncBreeze, which allows attackers to inject arbitrary scripts through user input, affecting all tested versions from v10.1 to v10.7. This flaw can lead to session hijacking, data leakage, and other malicious activities, compromising the security of users interacting with the application.

References

http://seclists.org/fulldisclosure/2018/May/4
mailing-listx_refsource_FULLDISC
http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-Disk...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.