Vulnerability CVE-2023-49488


Published: 2023-12-11   Modified: 2023-12-14

Description:
A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Affected software
Openfiler -> Openfiler 

 References:
https://github.com/Hebing123/cve/issues/1

Copyright 2024, cxsecurity.com

 

Back to Top