CVE-2024-31946

July 15, 2024, 7:15 p.m.

Product(s) Impacted

Stormshield Network Security (SNS)

  • 3.7.42
  • 3.11.30
  • 4.3.25
  • 4.7.5

Description

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview. The following versions fix this: 3.7.42, 3.11.30, 4.3.25, and 4.7.5.

Weaknesses

Date

Published: July 15, 2024, 7:15 p.m.

Last Modified: July 15, 2024, 7:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References