Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2266 EUVD-2023-33772GHSA-6vp4-j55c-qjx3

Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

Published Nov 30, 2023 · Updated Aug 2, 2024 · Assigned by SEL

Description

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user.

See product Instruction Manual Appendix A dated 20230830 for more details.

Affected products

VendorProductAffectedFixed
Schweitzer Engineering Laboratories SEL-411L R118-V0 – < R118-V4, R119-V0 – < R119-V5, R120-V0 – < R120-V6, R121-V0 – < R121-V3, R122-V0 – < R122-V3, R123-V0 – < R123-V3, R124-V0 – < R124-V3, R125-V0 – < R125-V3, R126-V0 – < R126-V4, R127-V0 – < R127-V2, R128-V0 – < R128-V1, R129-V0 – < R129-V1 R118-V4

References