Cross-Site Scripting Vulnerability in Polarion ALM

An attacker could trick an administrator into clicking a malicious link that executes JavaScript in their browser session, potentially allowing the attacker to steal session credentials or perform administrative actions in Polarion ALM.

Organizations using Polarion ALM for application lifecycle management and configuration management, particularly those with administrative staff who access the Subversion WebClient interface. This affects engineering teams and IT operations groups that rely on Polarion for document control and release management.

An attacker crafts a specially formatted URL containing malicious JavaScript and sends it to an administrator of Polarion ALM (via email, chat, or other means). When the administrator clicks the link, the JavaScript executes in their authenticated browser session, allowing the attacker to steal cookies, credentials, or perform actions as that administrator.