The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
9.9CVSS
8.5AI Score
0.001EPSS
The affected productβs web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.
6.3CVSS
6.3AI Score
0.001EPSS