Description
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability.
If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Toshiba Tec | e-STUDIO 908 | T2.12.h3.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1058 | T1.01.h4.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1208 | T1.01.h4.00 and earlier versions | — |
| Sharp | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation | — |