CVE-2021-27414

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

LocalTapiola: Reflected XSS and Open Redirect (verkkopalvelu.lahitapiola.fi)

Issue The reporter found a reflected XSS in verkkopalvelu.lahitapiola.fi but later discovered that the vulnerability also allowed open and unvalidated redirects. Fix The issue was mitigated. Reasoning An XSS as such is not a huge issue from a risk perspective, although it poses a small risk for...