Stored Cross-Site Scripting in Polarion Application by Siemens

CVE-2024-51446

What is CVE-2024-51446?

A vulnerability in the Polarion application allows authenticated remote attackers to exploit file upload functionality. The improper sanitization of XML files enables them to upload malicious files that may be viewed by other users of the application. This stored cross-site scripting issue could compromise user data and application integrity, posing a significant risk to organizations relying on Polarion.

References