CVE-2023-49260

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminaltool.cgi" path. It can be used together with the vulnerability CVE-2023-49255...

Path traversal

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminaltool.cgi" path. It can be used together with the vulnerability CVE-2023-49255...

CVE-2023-49260

CVE-2023-49260 is an XSS vulnerability where an attacker can inject script by manipulating the MOTD banner and directing users to the terminal_tool.cgi path; this can be exploited in conjunction with CVE-2023-49255. Red Hat’s entry for RH:CVE-2023-49260 corroborates the issue and mirrors the desc...