| 제목 | Clavister Clavister E80 - EagleSeries . Cross-Site Scripting |
|---|
| 설명 | Reflected XSS chained with CSRF poses a threat to Clavister E80 Firewall-protected web applications. In this scenario, attackers inject malicious scripts into the application, which execute in users' browsers, potentially leading to unauthorized actions like data theft or manipulation. While the firewall provides network security, it may not safeguard against these specific web application vulnerabilities. Mitigation strategies include secure coding practices, such as input validation and output encoding, as well as implementing anti-CSRF tokens and conducting regular security assessments. |
|---|
| 원천 | ⚠️ https://github.com/strik3r0x1/Vulns/blob/main/Clavister_E80-RXSS.md |
|---|
| 사용자 | Strik3r (UID 61057) |
|---|
| 제출 | 2024. 03. 23. PM 05:03 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 04. 01. PM 07:49 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 258916 [Clavister E10/E80 까지 14.00.10 Misc Settings Page MiscSettings 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|