Skip to content
OpenAdvisories
Medium · 5.0 CVE-2021-32009 EUVD-2021-18879GHSA-wm49-p28j-wfgv

Missing XSS guards on firmware page

Published Mar 11, 2022 · Updated Aug 3, 2024 · Assigned by Secomea

Description

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

Affected products

VendorProductAffectedFixed
Secomea GateManager All – ≤ 9.6.621421014 —

References