Dario Health Portal Service Application Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Dario Health portal service application. This issue affects the USB-C Blood Glucose Monitoring System Starter Kit Android Application, specifically versions 5.8.7.0.36 and prior, as well as the Dario Application Database and Internet-based Server Infrastructure, which are vulnerable in all versions. The XSS vulnerability could allow an attacker to inject malicious scripts, potentially leading to the exposure of sensitive information or full session compromise.

Impact

Exploitation of this vulnerability could result in cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.

Remediation

Users are advised to update the Dario Health Android mobile application to the latest version. For more information, contact Dario Health directly.