CVE-2019-5988

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after 2019 June 24

Description A stored cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Management Page. This could potentially lead to the execution of malicious scripts on the client-side.

Recommendations For versions prior to the version released after 2019 June 24, consider restricting access to the Management Page until a fix is available. As a temporary workaround, avoid using the Management Page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.