Cross site scripting

2023-05-1122:15:00

PRIOn knowledge base

www.prio-n.com

cross-site websocket hijacking

unifi os

vulnerability

unauthorized access

confidential information

nvd

affected products

mitigation

update

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affected Products:Cloud Key Gen2Cloud Key Gen2 PlusUNVRUNVR ProfessionalUDMUDM ProfessionalUDM SEUDRMitigation:Update affected products to UniFi OS 3.0.13 or later.