Security Advisory

CVE-2024-31160

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-14 03:41:21
Last updated 2024-08-02 01:46:04
Assigner twcert
State PUBLISHED

Description

The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks.