PT-2024-33504 · Acronis · Acronis Cyber Files
CVE-2024-49392
·
Published
2024-10-17
·
Updated
2024-10-18
CVSS v3.1
5.7
Medium
| Vector | AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Files (Windows) versions before 9.0.0x24
Description
A stored cross-site scripting (XSS) issue exists on the enrollment invitation page. This allows an attacker to inject malicious scripts into the page, potentially leading to unauthorized actions.
Recommendations
For versions before 9.0.0x24, update to a version 9.0.0x24 or later to resolve the issue. As a temporary workaround, consider restricting access to the enrollment invitation page until a patch is applied.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Acronis Cyber Files