A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044_update_05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description field in JSON data to the Profile Editor.
References
Link | Resource |
---|---|
https://www.mogozobo.com/?p=3476 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-06-07T15:06:04
Updated: 2019-06-07T15:06:04
Reserved: 2019-06-07T00:00:00
Link: CVE-2019-12774
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-06-07T16:29:00.597
Modified: 2019-06-10T18:45:32.577
Link: CVE-2019-12774
JSON object: View
Redhat Information
No data.
CWE