2 matches found
Design/Logic Flaw
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint...
7.5CVSS8.3AI score0.01117EPSS
SaveExploits1References2Affected Software1
CVE-2023-52252: Improper Restriction of XML External Entity Reference
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint...
9.8CVSS8.6AI score0.01117EPSS
SaveExploits1References2
20