Barracuda Directory Multiple HTML Injection Vulnerabilities

Barracuda Directory Multiple HTML Injection Vulnerabilities

Barracuda Directory is prone to multiple HTML-injection vulnerabilities. Successful exploitation could result in the execution of arbitrary scripts in the browser of a site administrator.

Attacker-supplied HTML and script code would be executed in the context of the affected site, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

These issues affect Barracuda Directory version 1.1. Other versions may also be vulnerable.