XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://seclists.org/fulldisclosure/2018/May/9 | third party advisory mailing list |
http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions | third party advisory |