Threats affecting pkg:maven/com.ibm/content-navigator

IBM Content Navigator versions 3.0.15, 3.1.0, and 3.2.0 contain a cross-site scripting (XSS) vulnerability that allows an authenticated user to inject arbitrary JavaScript code into the web user interface. This can alter the intended functionality and potentially lead to the disclosure of credentials within a trusted session. The vulnerability requires user interaction and privileges to exploit and does not impact availability. No official patch or remediation details are provided in the available data.