Security Advisory

CVE-2024-48870

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-25 06:18:57
Last updated 2024-10-25 14:15:16
Assigner jpcert
State PUBLISHED

Description

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.