Description
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors.
References
- http://www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html
- 62717 vdb-entry
- 38759 third-party-advisory
- 38541 vdb-entry