Secure Web Gateway 10.2.11 Cross Site Scripting

Secure Web Gateway version 10.2.11 suffers from a cross site scripting vulnerability. RedTeam Pentesting identified a vulnerability which allows attackers to craft URLs to any third-party website that result in arbitrary content to be injected into the response when accessed through the Secure Web Gateway. While it is possible to inject arbitrary content types, the primary risk arises from JavaScript code allowing for cross site scripting.

attackers code cross site scripting gateway inject javascript party pentesting redteam response result risk scripting secure web gateway third third-party types urls version vulnerability web website