CVE-2021-38403 in DIALink
要約
〜によって MITRE • 2021年11月04日
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter supplier of the API maintenance, which may allow an attacker to remotely execute code.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.