Skip to content
OpenAdvisories

Vendor

openshwprojects

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.5

    OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

    OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15…