Fujitsu Musetheque V4 Information Disclosure for IPKNOWLEDGE Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Fujitsu Musetheque V4 Information Disclosure for IPKNOWLEDGE, all versions through V4L1 rev2203.0. The vulnerability allows for the execution of arbitrary scripts in a user's web browser. This occurs when a file containing malicious content is uploaded and the administration page displaying the file information is viewed.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an uploaded file with malicious content can execute scripts in the context of the user's browser, particularly when the administration page related to the file is accessed.

Remediation

Users are advised to update to Fujitsu Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2603.1.