Beveiligingsadvies

CVE-2020-25352

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-08-20 18:10:48
Laatst bijgewerkt 2024-08-04 15:33:05
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javascript execution through entering a crafted payload into the 'Model' field then saving.