medium5.4
CVE-2018-5691
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.
Impact
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Analyzer | from 7.0 through 7.2 from 8.1 through 8.4 |
| Sonicwall | Global Management System | from 7.0 through 7.2 from 8.1 through 8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003
- https://www.vulnerability-lab.com/get_content.php?id=1819
- http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003
- https://www.vulnerability-lab.com/get_content.php?id=1819