Description MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. References https://us.msasafety.com/fieldserver https://us.msasafety.com/security-notices