Threats tagged 'ghsa-x4jf-f7j8-f92g'

IBM DataStage on Cloud Pak for Data version 5.4.0.0 contains a vulnerability where a remote authenticated attacker could execute arbitrary scripts by exploiting improper neutralization of input in the X-Forwarded-Host header. This vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation). The CVSS v3.1 base score is 4.4, indicating a medium severity level. No patch or remediation information is currently provided. Exploitation requires authentication and user interaction, and the attack complexity is high.