CVE-2018-18437

Name of the Vulnerable Software and Affected Versions AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico version 1.7.0

Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible due to the presence of a flaw in the "secret/relogoff.aspx" endpoint, specifically through the Error Desc parameter.

Recommendations For AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico version 1.7.0, as a temporary workaround, consider restricting access to the "secret/relogoff.aspx" endpoint until a patch is available. Avoid using the Error Desc parameter in this endpoint to minimize the risk of exploitation.