Design/Logic Flaw

2019-07-1720:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload to send to the product’s clients.

CPENameOperatorVersion
xpareeq3.67

CPE	Name	Operator	Version
	xpare	eq	3.67

References

cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/