Beveiligingsadvies

CVE-2023-4492

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-10-04 12:19:44

Laatst bijgewerkt 2024-09-05 18:10:37

Toegewezen door INCIBE

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded

← Alle CVE's bekijken Bekijk op cve.org ↗