Cross site scripting

2018-11-2714:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.

CPENameOperatorVersion
system_management_module_firmwarelt1.06

CPE	Name	Operator	Version
	system_management_module_firmware	lt	1.06

References

support.lenovo.com/us/en/solutions/LEN-24374