TRe Technology And Research S.R.L - HQ60 Fidelity Card: Reflected XSS Vulnerability

CVE-2024-51713

Summary

The vulnerability in the HQ60 Fidelity Card, developed by TRe Technology And Research S.R.L, arises from improper neutralization of user inputs during web page generation, leading to reflected cross-site scripting (XSS) incidents. This flaw allows attackers to inject malicious scripts into web pages that are rendered in the users' browsers, potentially compromising sensitive information and security. The vulnerability particularly affects all versions of the HQ60 Fidelity Card from an undisclosed initial release through version 1.8, emphasizing the need for mitigation strategies to protect user data and maintain application integrity.

References