Security Advisory

CVE-2021-26628

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-26 18:21:05

Last updated 2024-08-03 20:26:25

Assigner krcert

CVSS score 8.1

State PUBLISHED

Description

Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files.

← Browse all CVEs View on cve.org ↗