Description
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability.
Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sharp | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation | — |
| Toshiba Tec | e-STUDIO 908 | T2.12.h3.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1058 | T1.01.h4.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1208 | T1.01.h4.00 and earlier versions | — |