Cross-Site Scripting in Technicolor MediaAccess TG789vac v2 HP Devices
CVE-2018-8827
6.1MEDIUM
What is CVE-2018-8827?
The admin web interface of Technicolor MediaAccess TG789vac v2 HP devices allows an unauthenticated attacker to exploit a cross-site scripting vulnerability. The flaw arises from the display of unsanitized user input in the Log viewer interface, enabling malicious actors to inject JavaScript via a specially crafted HTTP Referer header. This opens pathways for potential exploitation, compromising the security of the web interface.