medium5.4
CVE-2017-17749
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
Impact
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bose | Soundtouch | All versions |