My Cloud - files.mycloud.com XSS Vulnerability
WDC Tracking Number: WDC-21006
Product Line: My Cloud
Published: May 20, 2021
Last Updated: May 20, 2021
Description
A XSS vulnerability was addressed in the My Cloud - files.mycloud.com which could allow an attacker to execute arbitrary client-side code in the user's browser session or allow the attacker to modify the session cookie with a payload that could take over a victim's browser.
Site Impact
files.mycloud.com
May 20, 2021
Advisory Summary
Resolved the XSS vulnerability by data filtering and encoding. The vulnerability is fixed and deployed as of May 20, 2021.
Reported by: Brian Carpenter, Principal Researcher from Geeknik Labs