EUVD-2020-6034

Malware in sbrugna...

CVE-2020-13819

Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...

Cross site request forgery (csrf)

Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...

CVE-2020-13819

Extreme EAC Appliance 8.4.1.24 is affected by an unauthenticated reflected XSS vulnerability exploitable via a parameter in a GET request. Underlying issue is a reflected script injection in user-supplied input. CVSS metrics indicate Network vector, low attack complexity, no authentication requir...