Poly Clariti Manager Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Poly Clariti Manager versions prior to 10.12.1. The vulnerability arises because the application fails to properly validate or sanitize user input before displaying it in the response, potentially allowing for the injection of malicious scripts.

Impact

Exploitation of this vulnerability could lead to reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to update to version 10.12.2 or later. The latest builds can be obtained through the Poly Lens Management Console.