SicommNet BASEC Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in SicommNet BASEC on SaaS, specifically in versions released from December 14, 2021, onwards. This vulnerability allows for improper neutralization of input during web page generation, leading to cross-site scripting (XSS) attacks. Exploitation of this issue could involve injecting arbitrary HTML and altering CSS styles.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.