SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM
The Subversion Webclient in Polarion ALM contains a cross-site scripting vulnerability, that could be triggered by an attacker by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Subversion Webclient in Polarion ALM and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-44478US | medium6.1 | — | ||
A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutral… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationPolarion ALM
Do not open links from untrusted sources while working on Polarion Subversion webclient
- MitigationPolarion WebClient for SVN
Do not open links from untrusted sources while working on Polarion Subversion webclient
- Kein Fix geplantPolarion WebClient for SVN
Currently no fix is planned
- BehobenPolarion ALM
Update to V21 R2 P2 or later version
https://support.sw.siemens.com/knowledge-base/PL8613685
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan