8.2
Élevée
CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability…
Description
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure Power Monitoring Expert (PME) | Versions non publiées | |
| EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module | Versions non publiées | |
| EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module | Versions non publiées |