CVE-2021-36381

Edifecs Transaction Management is affected by CVE-2021-36381: an unauthenticated attacker can inject arbitrary text into a user’s browser via logon.jsp?logon_error= on the login screen. The vulnerability stems from insufficient input validation on that parameter (per CNNVD-202107-646), enabling i...