PT-2024-14061
CVE-2023-51157
·
تاريخ النشر
2024-09-25
·
تاريخ التحديث
2024-10-02
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ZKTeco WDMS version 5.1.3 Pro
Description
A Cross Site Scripting issue allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the
Emp Name parameter. This enables the attacker to run any code and get sensitive info.Recommendations
For ZKTeco WDMS version 5.1.3 Pro, as a temporary workaround, consider restricting access to the
Emp Name parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾