CVE-2024-25831

Name of the Vulnerable Software and Affected Versions F-logic DataCube3 version 1.0

Description The issue is a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

Recommendations For F-logic DataCube3 version 1.0, consider implementing proper input sanitization to prevent the execution of arbitrary JavaScript code. As a temporary workaround, restrict access to the web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.