CVE-2023-2739

A vulnerability classified as problematic was found in Gira HomeServer up to 4.12.0.220829 beta. This vulnerability affects unknown code of the file /hslist. The manipulation of the argument lst with the input debug%27" leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2023-2739

Gira HomeServer , enabling remote exploitation. Exploitation context is remote and publicly disclosed; no patch version is stated in the provided documents. Remediation guidance from PT-.Security suggests temporary mitigation by restricting access to /hslist and avoiding use of the lst parameter ...