LogStare Collector Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in LogStare Collector, affecting both Windows and Linux versions through 2.4.1. This vulnerability resides in the User Management feature, where crafted user information can be stored and later executed as an arbitrary script in the web browser of users accessing the product's management page.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary scripts in the web browsers of users who log into the product's management page, potentially leading to session hijacking or other malicious actions.

Remediation

Users are advised to update LogStare Collector to version 2.4.2 for both Windows and Linux. Instructions for updating the software can be found on the LogStare KnowledgeStare website.