medium6.3
CVE-2021-42534
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the in…
Impact
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trane | Tracer Sc Firmware | through 3.8 |