Name of the Vulnerable Software and Affected Versions Галактика ERP (affected versions not specified)

Description The issue is related to weaknesses in the implementation of the browser interaction protocol and the IIS service in Галактика ERP. This could allow an attacker to execute arbitrary JavaScript code in the client's browser when the HTTPS protocol is disabled, by conducting "man-in-the-middle" attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.