| Package | Affected versions | Patched versions |
|---|---|---|
| aria automation | = 8.18.0= 8.18.1 | |
| cloud foundation | ≥ 4.0, ≤ 5.2.1 | |
| telco cloud platform | ≥ 5.0, ≤ 5.0.1 |
VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free