Security Advisory
CVE-2021-32092
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter.