5.4
Medium
CVE-2023-45227 An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by…
Description
An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lynx | 4.24 | No fix stated |
Other CVEs of Lynx
The 8 CVEs of Lynx →
CVE-2023-40143
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce…
5.4
Medium
CVE-2023-45735
A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the…
8.0
High
CVE-2023-45222
An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript…
5.4
Medium
CVE-2023-45213
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect…
6.6
Medium