There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content...
7.5CVSS7.5AI score0.00618EPSS
SaveExploits0References1
ATTACKERKB•added 2023/03/23 9:15 p.m.•2 views
CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
