Unscored CVE-2016-1136 EUVD-2016-2240GHSA-pwvf-4m55-4625

Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web …

Published Jan 30, 2016 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06
JVNDB-2016-000007 third-party-advisory
JVN#54686544 third-party-advisory