Security Advisory

CVE-2021-32542

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-28 08:10:27

Last updated 2024-09-16 19:05:10

Assigner twcert

State PUBLISHED

Description

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack.

← Browse all CVEs View on cve.org ↗