A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored…
A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Arista Networks
- Product
- EOS / CloudVision
- CVSS
- 8.4
- EPSS
- 0.003 (p21)
- Exposure class
- Edge / VPN / firewall
Why it ranks 28 (Notable)
- CVSS 8.4 high
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Arista Networks)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.