PT-2023-29199 · Dell · Dell Dm5500

CVE-2023-44301

·

Publicado

2023-12-04

·

Atualizado

2023-12-18

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Dell DM5500 versions 5.14.0.0 and prior
Description A network attacker with low privileges could potentially exploit this issue, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Recommendations For versions 5.14.0.0 and prior, consider disabling the web application until a patch is available to prevent exploitation of the Reflected Cross-Site Scripting issue. Restrict access to the vulnerable web application to minimize the risk of exploitation. Avoid using the vulnerable web application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-44301

Produtos afetados

Dell Dm5500