Security Advisory

CVE-2020-8348

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-24 21:05:28
Last updated 2024-08-04 09:56:28
Assigner lenovo
State PUBLISHED

Description

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated users current browser session if a crafted url is visited, possibly through phishing.