Cross site scripting

2022-10-2717:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

reflected xss

web-based interface

encoder address

crafted link

javascript code

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

CPENameOperatorVersion
videojet_multi_4000_firmwarele6.31.0010

CPE	Name	Operator	Version
	videojet_multi_4000_firmware	le	6.31.0010

References

psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html