Description
COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
COMMAX Co., Ltd. COMMAX Biometric Access Control System
1.0.0affected
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5660.php ↗
- https://packetstormsecurity.com/files/163834 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/207578 ↗
- https://cxsecurity.com/issue/WLB-2021080063 ↗
- https://www.commax.com/ ↗
- https://www.vulncheck.com/advisories/commax-biometric-access-control-system-reflected-xss-via-cookie-parameters ↗