CVE-2023-28361
11.05.2023, 22:15
A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affected Products:Cloud Key Gen2Cloud Key Gen2 PlusUNVRUNVR ProfessionalUDMUDM ProfessionalUDM SEUDRMitigation:Update affected products to UniFi OS 3.0.13 or later.
| Vendor | Product | Version |
|---|---|---|
| uni | unifi_os | 𝑥 < 3.0.13 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration