Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2022-40183

Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch VIDEOJET multi 4000

  • unspecified to ≤ 6.31.0010affected

References