IDI Eikon Governalia Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in IDI Eikon's Governalia, affecting versions prior to 1274. This vulnerability allows an attacker to execute JavaScript in the victim's browser by sending a malicious URL with the 'q' parameter to them. Exploitation of this issue could lead to the theft of sensitive information, such as session cookies, or allow actions to be performed on behalf of the victim.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute scripts in the context of the user's browser session.

Remediation

Users can upgrade to Governalia version 1274 or later to address this vulnerability.