CVE-2024-48870
CVE-2024-48870
Título es
CVE-2024-48870
Vie, 25/10/2024 – 07:15
Tipo
CWE-79
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-48870
Descripción en
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability.
If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
25/10/2024
25/10/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
6.20
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Referencias
Enviar en el boletín
Off
