Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could potentially gain the ability to authenticate against a remote host using the current user’s credentials. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? Exploitation of the vulnerability requires that a user to open a specially crafted link. An attacker would have no way to force users to click the link. Instead, an attacker would have to convince users to click the link through social engineering.
<a href="https://anandsreekumar.com/">Anand (anandsreekumar.com)</a>