CVE-2017-7296

An issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is present in the MQTT/IBM Cloud Config page aka mqtt.html of cc26xx-web-demo. The cc26xx-web-demo features a webserver that runs on a constrained device. That particular page allows a user to remotely configu...

CVE-2017-7296

The CVE concerns Contiki OS 3.0 with the cc26xx-web-demo’s MQTT/IBM Cloud Config page (mqtt.html). A Persistent XSS flaw arises from improper input sanitisation of text fields on that page, which processes HTTP POST requests and can inject JavaScript code remotely. Affected component: webserver o...