Описание
Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard events through an exposed WebSocket on port 8082. Attackers can craft malicious web pages to inject keystrokes, opening applications and typing arbitrary text by sending specific WebSocket messages.
Ссылки
- Exploit
- Product
- Third Party Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:prowise:reflect:1.0.9:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.00023
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-346
Связанные уязвимости
CVSS3: 9.8
github
25 дней назад
Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard events through an exposed WebSocket on port 8082. Attackers can craft malicious web pages to inject keystrokes, opening applications and typing arbitrary text by sending specific WebSocket messages.
EPSS
Процентиль: 5%
0.00023
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-346