Cross site scripting

2021-12-2219:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

JSON

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

CPENameOperatorVersion
diaenergiele1.7.5

CPE	Name	Operator	Version
	diaenergie	le	1.7.5

References

www.cisa.gov/uscert/ics/advisories/icsa-21-238-03