Beveiligingsadvies
CVE-2020-12256
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.