Description
In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logon_error= on the login screen of the Web application.
Unscored
CVE-2021-36381
EUVD-2021-22997GHSA-26xp-w34p-3h6q
In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp…
Published Jul 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre