CVE-2023-49296: Improper Neutralization of Input During Web Page Generation

The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino board directly from the browser. A vulnerability in versions prior to 1.3.6 affects the endpoint /certificate.crt and the way the web interface of the ArduinoCreateAgent handle...

PT-2023-31156

Name of the Vulnerable Software and Affected Versions Arduino Create Agent versions prior to 1.3.6 Description A vulnerability affects the endpoint "/certificate.crt" and the way the web interface of the ArduinoCreateAgent handles custom error messages. An attacker can perform a Reflected...