ZIV IDF and ZLF Products Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in ZIV's IDF version 0.10.0-0C03-03 and ZLF version 0.10.0-0C03-04. This vulnerability allows an authenticated attacker to inject malicious JavaScript that is executed in the context of the victim's browser. Exploitation requires executing specific commands that are permitted only with higher than view permissions.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users can upgrade to ZIV IDF and ZLF versions 1.1.0 to address this vulnerability.