CVE-2024-31946
July 15, 2024, 7:15 p.m.
Tags
Product(s) Impacted
Stormshield Network Security (SNS)
- 3.7.42
- 3.11.30
- 4.3.25
- 4.7.5
Description
An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview. The following versions fix this: 3.7.42, 3.11.30, 4.3.25, and 4.7.5.
Weaknesses
Date
Published: July 15, 2024, 7:15 p.m.
Last Modified: July 15, 2024, 7:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
References
https://advisories.stormshield.eu/
cve@mitre.org