CVE-2023-2396

The CVE-2023-2396 case concerns Netgear SRX5308 web management interface cross-site scripting (XSS) via manipulation of the USERDBUsers.Password parameter. Affected product: Netgear SRX5308 (firmware up to 4.3.5-3). Root cause: improper handling of a password argument in the Web Management Interf...

CVE-2023-2396 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The...