CVE-2021-45092
16.12.2021, 04:15
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.Enginsight
Vendor | Product | Version |
---|---|---|
cybelesoft | thinfinity_virtualui | 𝑥 < 3.0 |
𝑥
= Vulnerable software versions