medium6.1
CVE-2021-35503
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.
Impact
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afian | Filerun | Version 2021.03.26 |