Awareness and guidance related to potential Service Fabric Explorer (SFX) v1 web client risk

Microsoft Security HeaderMicrosoft Security Header
Summary Microsoft was recently made aware of a Cross-Site Scripting (XSS) vulnerability (CVE-2022-35829), that under limited circumstances, affects older versions of Service Fabric Explorer (SFX). The current default SFX web client (SFXv2) is not vulnerable to this attack. However, customers can manually switch from the default web client (SFXv2) to an older vulnerable SFX web …

Awareness and guidance related to potential Service Fabric Explorer (SFX) v1 web client risk Read More »

Source – Microsoft Security Response Center

All content and images belong to their respected owners, this article is curated for informational purposes only.

Exit mobile version