PT-2021-21670
CVE-2021-37456
·
تاريخ النشر
2021-07-25
·
تاريخ التحديث
2021-07-28
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NCH Axon PBX versions 2.22 and earlier
Description
Cross Site Scripting (XSS) exists via the blacklist IP address (stored).
Recommendations
For versions 2.22 and earlier, consider disabling the blacklist IP address feature until a patch is available. Restrict access to the affected area to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾