Cross-site Scripting Vulnerability in Siemens Polarion Webclient

CVE-2019-13936

Summary

The vulnerability in Siemens AG Polarion's webclient stems from improper input sanitization during web page generation. This flaw enables an attacker to execute malicious scripts in the context of users accessing the site, potentially leading to persistent cross-site scripting attacks. All versions of Polarion prior to 19.2 are susceptible, emphasizing the need for adherent security practices and timely updates to protect against exploitation.

References