PT-2023-29199 · Dell · Dell Dm5500
CVE-2023-44301
·
Publicado
2023-12-04
·
Atualizado
2023-12-18
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Dell DM5500 versions 5.14.0.0 and prior
Description
A network attacker with low privileges could potentially exploit this issue, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Recommendations
For versions 5.14.0.0 and prior, consider disabling the web application until a patch is available to prevent exploitation of the Reflected Cross-Site Scripting issue. Restrict access to the vulnerable web application to minimize the risk of exploitation. Avoid using the vulnerable web application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dell Dm5500