The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts.
Successful exploitation allows a remote attacker to execute arbitrary JavaScript in the context of a victim's browser, leading to actions such as redirecting the user to a malicious website or modifying the web page's user interface. Session hijacking is not possible as sensitive session cookies are protected by the httpOnly flag.
CVSS
4.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
before 3.2.0 status unknown; from 3.2.0 before 3.2.0.433; from 3.2.1 before 3.2.1.53; from 4.1.0 before 4.1.0.215; from 4.2.0 before 4.2.0.153; from 4.3.0 before 4.3.0.66; from 4.4.0 before 4.4.0.29; from 4.5.0 before 4.5.0.11
from 5.2.26 before 5.2.26.19; from 5.2.41 before 5.2.41.6; from 5.2.57 before 5.2.57.7; from 5.3.5 before 5.3.5.4; from 5.3.11 before 5.3.11.4; from 5.3.15 before 5.3.15.3; from 5.3.20 before 5.3.20.1
from 5.2.26 before 5.2.26.19; from 5.2.41 before 5.2.41.6; from 5.2.57 before 5.2.57.7; from 5.3.5 before 5.3.5.4; from 5.3.11 before 5.3.11.4; from 5.3.15 before 5.3.15.3; from 5.3.20 before 5.3.20.1
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
