CVE-2020-5317

6.2MEDIUM

Key Information:

Vendor
Dell
Status
Elastic Cloud Storage
Vendor
CVE Published:
6 February 2020

Summary

Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

Affected Version(s)

Elastic Cloud Storage < 3.4.0.1

References

https://www.dell.com/support/security/en-us/details/54078...
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.