XSS in Barraguard Barracuda Link Balancer

CVE-2011-5114

Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.0th percentile) — read the EPSS interpretation.

Affected products

Barraguard Barracuda_link_balancer — versions 330
Barraguard Barracuda_link_balancer_series_firmware — versions 1.3.2.005
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)