CVE-2023-45222

Опубликовано: 06 фев. 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.

Ссылки

https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
Third Party Advisory
US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:westermo:l206-f2g_firmware:4.24:*:*:*:*:*:*:*

cpe:2.3:h:westermo:l206-f2g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00097

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-pxh8-3c47-gmr6

CVSS3: 5.4

github

около 2 лет назад

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.

EPSS

Процентиль: 27%

0.00097

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79