CVE-2023-3971 Controller: html injection in custom login info

2023-10-0414:26:01

CWE-80

redhat

raw.githubusercontent.com

html injection

controller

credential capture

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.6%

JSON

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.