The vulnerability allows an attacker to inject and execute arbitrary JavaScript within the context of the CFEngine Enterprise web interface. This cross‑site scripting flaw (CWE‑79) could enable modification of displayed content or capture information stored in the browser, but the CVE description does not specify particular exploitation outcomes such as credential theft or session hijack.

Northern.tech CFEngine Enterprise releases prior to 3.21.8, 3.24.3, and 3.27.0 are affected. The flaw resides in the web UI component of these versions.

The CVSS score of 6.1 indicates moderate severity. The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog. The likely attack vector is through the web interface where malicious input may be entered and subsequently rendered without proper sanitization; exploitation requires an authenticated user to interact with the interface from a browser, which reduces the overall threat level compared to remote code execution but still poses a significant risk to users of the affected UI.