This vulnerability involves improper neutralization of input during web page generation in Juniper Networks Junos Space, specifically allowing script injection through the list filter field. Successful exploitation enables execution of arbitrary commands with the permissions of the user viewing the injected content, which could include administrators. The issue affects all versions before 24.1R5 Patch V3. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability. No vendor advisory or patch information is currently available.

An attacker can inject malicious scripts that execute in the context of other users' sessions, potentially leading to unauthorized actions performed with the victim's privileges, including administrative commands. This can compromise confidentiality and integrity of the affected system. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input in the list filter field and consider limiting access to Junos Space interfaces. Monitor vendor communications for updates on patches or official mitigations.