Unscored CVE-2019-17523 EUVD-2019-7874GHSA-hc66-45h3-rxg5

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName param…

Published Nov 13, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.

References

https://www.technicolor.com/news
https://gitlab.com/luiss/cve_repo/blob/master/CVE-2019-17524/README.md