HTML Injection Vulnerability in MT Safeline X-Ray X3310 Webserver
CVE-2023-25200

4.7MEDIUM

Key Information:

Vendor

MT Safeline

Vendor
CVE Published:
4 April 2024

What is CVE-2023-25200?

An HTML injection vulnerability identified in the MT Safeline X-Ray X3310 webserver version NXG 19.05 allows remote attackers to inject malicious HTML content. This can lead to the execution of unauthorized scripts in the context of a user's browser, potentially compromising sensitive data. Organizations using this webserver must implement security measures to mitigate the risks associated with this vulnerability.

References

https://summitinfosec.com/blog/x-ray-vision-identifying-c...

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.