CVE-2023-49258 Reflected cross-site scripting vulnerability

2024-01-1214:24:57

CWE-79

CERT-PL

www.cve.org

cve-2023-49258

xss

cross-site scripting

authentication cookie

0.0005 Low

EPSS

Percentile

17.1%

JSON

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at “/gui/terminal_tool.cgi” in the “data” parameter.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "H8951-4G-ESP",
    "vendor": "Hongdian",
    "versions": [
      {
        "lessThan": "2310271149",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

cert.pl/en/posts/2024/01/CVE-2023-49253/

cert.pl/posts/2024/01/CVE-2023-49253/

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for CVELIST:CVE-2023-49258