CVE-2023-46483

2023-11-0800:00:00

mitre

github.com

cross site scripting

timetec awdms

new zone function

AI Score

6.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function.

References

github.com/fengniange/TimeTec_Cloud_AWDMS/