Cross-Site Scripting Vulnerability in Mobotix M15 by Mobotix

CVE-2025-0576

Summary

A vulnerability in Mobotix M15 version 4.3.4.83 allows attackers to exploit the file handling of specific arguments. Manipulation of the 'p_qual' parameter can lead to reflected cross-site scripting attacks, enabling unauthorized access to user data or session hijacking. The threat can be initiated remotely, amplifying its risk. Despite early disclosure to the vendor, no response has been reported, leaving the exploit publicly accessible.

References