Description
WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-1 endpoint. Attackers can exploit this flaw to harvest credentials, manipulate the login flow, access browser-visible data, and perform same-origin requests to controller endpoints, including an origin-switch primitive against the internal controller in Cloud RIA scenarios.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WIT | SynApps Runtime | ≤ 1.4.11 | — |
References
- Researcher Disclosure technical-description exploit
- VulnCheck Advisory: WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter third-party-advisory