CVE-2024-5420

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-5420
Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.
CVSS

No CVSS.

References
Link Resource
http://seclists.org/fulldisclosure/2024/Jun/4
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/index.html
Configurations

No configuration.

History

10 Jun 2024, 18:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2024/Jun/4 -

04 Jun 2024, 16:57

Type Values Removed Values Added
Summary
  • (es) Falta la validación de entrada en SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, la interfaz web de SEH Computertechnik INU-100 permite Cross-Site Scripting (XSS) Almacenado. Este problema afecta a utnserver Pro, utnserver ProMAX, INU-100 versión 20.1.22. y por debajo.

04 Jun 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-04 08:15

Updated : 2024-06-10 18:15

NVD link : CVE-2024-5420

Mitre link : CVE-2024-5420

CVE.ORG link : CVE-2024-5420

JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')