Low · 3.5 CVE-2020-29021 EUVD-2020-21403GHSA-fjq4-gjv6-rcj2

Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)

Published Feb 8, 2021 · Updated Sep 17, 2024 · Assigned by Secomea

Description

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.

Affected products

Vendor	Product	Affected	Fixed
Secomea	GateManager	all – < 9.3	9.3

References

https://www.secomea.com/support/cybersecurity-advisory/