CVE-2019-10771

Characters in the GET url path are not properly escaped and can be reflected in the server response...

Design/Logic Flaw

Characters in the GET url path are not properly escaped and can be reflected in the server response...

CVE-2019-10771

Characters in the GET url path are not properly escaped and can be reflected in the server response...

CVE-2019-10771: Improper Neutralization of Input During Web Page Generation

Characters in the GET url path are not properly escaped and can be reflected in the server response...

PT-2019-12042

Name of the Vulnerable Software and Affected Versions iobroker.web versions prior to 2.4.10 Description The issue arises from characters in the GET URL path not being properly escaped, which can be reflected in the server response. This can lead to Cross-Site Scripting, where attackers can execut...