CVE-2023-40819
06.08.2024, 14:16
ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.
| Vendor | Product | Version |
|---|---|---|
| devlop.systems | id4portais | 𝑥 ≤ 2022.837.002a |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
- CWE-233 - Improper Handling of ParametersThe software does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.