Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2021-23848

Reflected XSS in URL handler

Description

An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch CPP Firmware

  • allaffected

References