JVN#68830017: KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains an issue in the processing of access logs, which may lead to a cross-site scripting vulnerability.

Note that this vulnerability is different from JVN#23563149.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the Software
Update to the latest version and modify the particular method in which tags are embedded into the web page, according to the information provided by the developer.

This solution also addresses JVN#23563149.

Products Affected

• ACCESS REPORT v4.2 and earlier