5.4
Medium
CVE-2023-45222 An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript…
Description
An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lynx | 4.24 | No fix stated |
Other CVEs of Lynx
The 8 CVEs of Lynx →
CVE-2023-40143
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce…
5.4
Medium
CVE-2023-45735
A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the…
8.0
High
CVE-2023-45213
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect…
6.6
Medium
CVE-2023-42765
An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site…
5.4
Medium