IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2024-01175)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from International Business Machines (IBM). The platform provides a set of design-time and run-time components for building and running its enterprise-class applications, respectively, and supports customer-specific configurations without requiring changes to the source code. The IBM TRIRIGA Application Platform suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which could be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload.