Medium · 6.1 CVE-2024-25831 EUVD-2024-23138GHSA-gw2f-jv86-5xc3

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An au…

Published Feb 28, 2024 · Updated Aug 20, 2024 · Assigned by mitre

Description

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

References

https://neroteam.com/blog/f-logic-datacube3-vulnerability-report