Description
An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcadia Technology | Crafty Controller | 4.2.2 – ≤ 4.2.3, 4.3.0 – ≤ 4.3.2, 4.4.0 – < 4.4.10 | 4.4.10 |
References
- GitLab Issue #567 issue-tracking permissions-required