CVE-2019-10771

Summary

Characters in the GET url path are not properly escaped and can be reflected in the server response.

Affected Software

VendorProductVersion RangeStatus
n/aiobroker.webAll versions prior to version 2.4.10affected

Weaknesses

  • Cross-site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

References