PT-2019-18592
CVE-2019-7418
·
تاريخ النشر
2019-03-17
·
تاريخ التحديث
2019-03-25
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015
Description
A security issue exists in the SyncThru Web Service, where an XSS issue is present in the "/sws/swsAlert.sws" endpoint, affecting multiple parameters:
flag, frame, func, and Nfunc.Recommendations
For SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015, consider restricting access to the "/sws/swsAlert.sws" endpoint until a fix is available, and avoid using the parameters
flag, frame, func, and Nfunc in this endpoint to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾