Fltys

**Name of the Vulnerable Software and Affected Versions** vaeThink version 1.0.2 **Description** The issue concerns Information Disclosure via the system backend, specifically affecting the access management administrator function. **Recommendations** For vaeThink version 1.0.2, consider restricting access to the system backend and access management administrator function until a fix is available.

**Name of the Vulnerable Software and Affected Versions** vaeThink version 1.0.2 **Description** The issue is related to stored Cross Site Scripting (XSS) in the system backend. This means that an attacker can inject malicious scripts into the system, which can then be executed by other users, potentially leading to unauthorized actions or data theft. **Recommendations** For vaeThink version 1.0.2, consider disabling the backend functionality temporarily to prevent exploitation until a patch is available. Restrict access to the system backend to minimize the risk of stored XSS attacks. Avoid using the system backend for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.