CVE-2023-39372

CVE-2023-39372 affects StarTrinity Softswitch (version 2023-02-16) and is described as multiple CSRF (CWE-352). Public documents identify CSRF as the underlying issue but do not provide a concrete fix in a newer release. CVSS metrics indicate high impact (confidentiality, integrity, availability)...

CVE-2023-39371 StarTrinity Softswitch version 2023-02-16 – Open Redirect (CWE-601)

StarTrinity Softswitch version 2023-02-16 - Open Redirect CWE-601...

CVE-2023-39371 StarTrinity Softswitch version 2023-02-16 – Open Redirect (CWE-601)

StarTrinity Softswitch version 2023-02-16 - Open Redirect CWE-601...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

CVE-2023-39370 affects StarTrinity Softswitch, specifically version 2023-02-16, with a Persistent XSS vulnerability (CWE-79) in the web UI. Root cause is improper handling of user-supplied input leading to script injection. Documented impact includes confidentiality and integrity concerns (per CV...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39369 StarTrinity Softswitch version 2023-02-16 - multiple Reflected XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS CWE-79...

CVE-2023-39369

CVE-2023-39369 affects StarTrinity Softswitch version 2023-02-16 and is described as multiple Reflected XSS (CWE-79). The available connected documents consistently identify the vulnerable component as the Softswitch web interface, with the underlying issue described as reflected cross-site scrip...

CVE-2023-39369 StarTrinity Softswitch version 2023-02-16 - multiple Reflected XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS CWE-79...

PT-2023-26899 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to a Persistent XSS CWE-79 in StarTrinity Softswitch. Recommendations: For StarTrinity Softswitch version 2023-02-16, at the moment, there is no information about a...

StarTrinity Softswitch Cross-Site Scripting Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. A cross-site scripting vulnerability exists in StarTrinity Softswitch version 2023-02-16, which can be exploited by an attacker to inject malicious scripts into web sites...

PT-2023-26900 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to an Open Redirect, which is a type of security vulnerability. This vulnerability allows an attacker to redirect a user to a malicious website, potentially leading t...

StarTrinity Softswitch Input Validation Error Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. An input validation error vulnerability exists in StarTrinity Softswitch version 2023-02-16 that stems from the presence of an open redirect...

PT-2023-26897 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to Multiple Reflected XSS CWE-79. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

StarTrinity Softswitch Cross-Site Scripting Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. A cross-site scripting vulnerability exists in StarTrinity Softswitch version 2023-02-16, which can be exploited by an attacker to inject malicious scripts into web sites...

StarTrinity Softswitch Cross-Site Request Forgery Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. A cross-site request forgery vulnerability exists in StarTrinity Softswitch version 2023-02-16, which stems from the presence of multiple cross-site request forgery CSRF...

PT-2023-26901 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to multiple CSRF CWE-352 problems. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

DEBIAN-CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...