5.4
Medium
CVE-2023-40143 An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce…
Description
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lynx | 4.24 | No fix stated |
Other CVEs of Lynx
The 8 CVEs of Lynx →
CVE-2023-45735
A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the…
8.0
High
CVE-2023-45222
An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript…
5.4
Medium
CVE-2023-45213
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect…
6.6
Medium
CVE-2023-42765
An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site…
5.4
Medium