Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability

A cross-site scripting vulnerability allowing remote code execution has been identified in Heimdall Data Database Proxy. This issue arises from improper validation of user-supplied data in the database event logs, enabling the injection of arbitrary scripts. Exploitation of this vulnerability requires minimal user interaction and allows attackers to execute code in the context of the targeted user.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users can upgrade to release build 25.03.01.10 to address this vulnerability.