CVE-2021-27418

Published: 2022-03-23T20:15Z

Last Modified: 2024-11-21T05:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt