CVE-2023-29836

Exelysis EUCS v1.0 has a cross-site scripting vulnerability that can allow a remote attacker to gain privileges via the eucsAdmin login URL path. Related entries CVE-2023-29836 and CVE-2023-29837 describe the same issue. Some sources (PT-2023-22437) provide temporary mitigations (restrict access ...

CVE-2023-29837

The CVE describes a Cross-Site Scripting (XSS) vulnerability in Exelysis Unified Communication Solution (EUCS) v1.0. The issue affects the eucsAdmin login web page, where an attacker can craft a URL path to execute scripts, potentially enabling remote privilege gain. The NVD/CVE metadata indicate...