IBM Aspera Shares HTML Injection Vulnerability

A vulnerability allowing HTML injection has been identified in IBM Aspera Shares versions 1.9.9 prior to 1.11.0. This issue enables remote attackers to inject malicious HTML, which would be executed in the context of the victim's web browser, potentially leading to cross-site scripting.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected HTML is executed in the context of the user's browser.

Remediation

Users can upgrade to IBM Aspera Shares version 1.11.1 to address this vulnerability. Instructions for downloading this version are available on the IBM Support Fix Central website.