Security Advisory

CVE-2018-12638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-17 18:27:44

Last updated 2024-08-05 08:38:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app.

← Browse all CVEs View on cve.org ↗