medium4.8
CVE-2021-44310
An issue was discovered in Firmware Analysis and Comparison Tool v3.2.
Impact
An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Firmware Analysis And Comparison Tool Project | Firmware Analysis And Comparison Tool | Version 3.2 |