Описание
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
Ссылки
- Product
- Third Party AdvisoryExploit
- Third Party AdvisoryExploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:bridgetech:vbc_server:6.5.0-9:*:*:*:*:*:*:*
cpe:2.3:a:bridgetech:vbc_server:6.5.0-10:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00062
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
3 месяца назад
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
EPSS
Процентиль: 19%
0.00062
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79